PT-2006-1725 · Ga · Ga'S Forum Light

Dj_Eyes · Publicado 2006-02-13 · Atualizado 2024-08-07 · CVE-2006-0669

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions GA's Forum Light (affected versions not specified)

Description The issue allows remote attackers to execute arbitrary SQL commands via the Forum and pages parameters in the archive.asp file. However, the vendor has disputed this issue, stating that GA Forum Light does not use an SQL database. Research suggests that the problem could be due to a vbscript parsing error based on invalid arguments.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2006-0669

Produtos afetados

Ga'S Forum Light

Referências · 8

• 🔥 http://securitytracker.com/id?1015600 · Exploit
• 🔥 https://exploit-db.com/exploits/27174 · Exploit
• 🔥 http://securityfocus.com/bid/16563 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24616 · Nota
• https://t.me/cvenotify/89753 · Publicação no Telegram
• http://attrition.org/pipermail/vim/2006-February/000561.html · Nota
• http://osvdb.org/23509 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0669 · Nota de Segurança