PT-2006-2043 · Parodia · Parodia

Publicado 2006-03-06 · Atualizado 2008-09-05 · CVE-2006-1005

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Parodia versions 6.2 and earlier

Description The issue might allow remote attackers to obtain sensitive information by triggering an SQL error via an invalid AG ID parameter in the "agencyprofile.asp" page.

Recommendations For Parodia versions 6.2 and earlier, consider restricting access to the "agencyprofile.asp" page until a fix is available, and avoid using an invalid AG ID parameter to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2006-1005

Produtos afetados

Parodia

Referências · 2

• http://secunia.com/advisories/19025 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2006-1005 · Nota de Segurança