PT-2006-3455 · Unknown · Stylish Text Ads Script

Luny · Publicado 2006-05-22 · Atualizado 2018-10-18 · CVE-2006-2508

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Stylish Text Ads Script version (affected versions not specified)

Description The issue allows remote attackers to execute arbitrary SQL commands, possibly involving an attack vector using advertise.php, by exploiting a SQL injection vulnerability in tr1.php via the id parameter.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2006-2508

Produtos afetados

Stylish Text Ads Script

Referências · 10

• 🔥 http://osvdb.org/25691 · Exploit
• 🔥 http://securityfocus.com/bid/18044 · Exploit
• 🔥 http://osvdb.org/25692 · Exploit
• http://securityfocus.com/archive/1/434527/100/0/threaded · Nota
• http://vupen.com/english/advisories/2006/1897 · Nota
• http://securityreason.com/securityalert/931 · Nota
• http://secunia.com/advisories/20213 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2006-2508 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26569 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26570 · Nota