PT-2006-3023 · Oracle+3 · Jsp+4

Publicado 2006-05-09 · Atualizado 2017-07-20 · CVE-2006-2042

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Adobe Dreamweaver versions 8.0 through 8.0.1 Adobe Dreamweaver MX 2004

Description The issue allows SQL injection attacks in various server models, including ColdFusion, PHP mySQL, ASP, ASP.NET, and JSP.

Recommendations For Adobe Dreamweaver versions 8.0 through 8.0.1, update to version 8.0.2 or later. For Adobe Dreamweaver MX 2004, consider disabling the code generation feature for the affected server models until a patch is available.

Correção

Identificadores relacionados

CVE-2006-2042

Produtos afetados

Asp.Net

Dreamweaver

Coldfusion

Jsp

Php

Referências · 10

• http://adobe.com/support/security/bulletins/apsb06-07.html · Aviso do Fabricante
• http://osvdb.org/25361 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26339 · Nota
• http://vupen.com/english/advisories/2006/1753 · Nota
• http://secunia.com/advisories/20054 · Nota
• http://securityfocus.com/bid/17928 · Nota
• http://securitytracker.com/id?1016050 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-2042 · Nota de Segurança
• http://archives.neohapsis.com/archives/bugtraq/2006-05/0194.html · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2042 · Nota