PT-2006-1896 · Ilchclan · Ilchclan

Publicado 2006-02-23 · Atualizado 2017-07-20 · CVE-2006-0850

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ilchClan versions prior to 1.05g

Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the login name parameter in the include/includes/user/login.php file.

Recommendations For versions prior to 1.05g, update to version 1.05g or later to resolve the issue. As a temporary workaround, consider restricting access to the login functionality to minimize the risk of exploitation. Avoid using the login name parameter in the affected login endpoint until the issue is resolved.

Correção

Identificadores relacionados

CVE-2006-0850

Produtos afetados

Ilchclan

Referências · 6

• http://ilch.de/news-134.html · Nota
• http://secunia.com/advisories/18951 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24830 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0850 · Nota de Segurança
• http://osvdb.org/23370 · Nota
• http://vupen.com/english/advisories/2006/0676 · Nota