PT-2006-1484 · Minibloggie · Minibloggie

Publicado 2006-01-25 · Atualizado 2018-10-19 · CVE-2006-0417

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions miniBloggie versions 1.0 and earlier

Description The issue allows remote attackers to execute arbitrary SQL commands and bypass authentication. This is achieved via the username and password parameters when gpc magic quotes is disabled.

Recommendations For miniBloggie versions 1.0 and earlier, consider disabling the login functionality in login.php until a patch is available, or enable gpc magic quotes to prevent SQL injection attacks.

Exploit

Correção

Identificadores relacionados

CVE-2006-0417

Produtos afetados

Minibloggie

Referências · 10

• 🔥 http://evuln.com/vulns/47/summary.html · Exploit
• 🔥 https://exploit-db.com/exploits/27125 · Exploit
• http://osvdb.org/22729 · Nota
• http://vupen.com/english/advisories/2006/0310 · Nota
• http://securitytracker.com/id?1015534 · Nota
• http://securityfocus.com/archive/1/423126/100/0/threaded · Nota
• http://securityfocus.com/bid/16367 · Nota
• http://secunia.com/advisories/18604 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0417 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24280 · Nota