PT-2006-3434 · Yapbb · Yapbb

Geinblues + 2 · Publicado 2006-05-19 · Atualizado 2018-10-18 · CVE-2006-2486

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions YapBB versions 1.2 Beta2 and earlier

Description The issue allows remote attackers to execute arbitrary SQL commands via the userID parameter in the "find.php" file.

Recommendations For YapBB versions 1.2 Beta2 and earlier, avoid using the userID parameter in the affected find.php file until the issue is resolved.

Correção

Identificadores relacionados

CVE-2006-2486

Produtos afetados

Yapbb

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2006-2486 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26456 · Nota
• http://securityfocus.com/bid/17988 · Nota
• http://securityfocus.com/archive/1/434039/100/0/threaded · Nota
• http://securityreason.com/securityalert/923 · Nota