PT-2006-5263 · Js Asp · Js Asp Faq Manager

S3Rv3R_Hack3R · Publicado 2006-08-31 · Atualizado 2018-10-17 · CVE-2006-4463

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions JS ASP Faq Manager version 1.10

Description A SQL injection issue exists in the administrator control panel, allowing remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the pwd parameter, also known as the Password field.

Recommendations For JS ASP Faq Manager version 1.10, avoid using the pwd parameter in the administrator control panel until a fix is available. Consider restricting access to the control panel to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Identificadores relacionados

CVE-2006-4463

Produtos afetados

Js Asp Faq Manager

Referências · 8

• http://securityfocus.com/bid/19761 · Nota
• http://vupen.com/english/advisories/2006/3415 · Nota
• http://securityfocus.com/archive/1/444652/100/0/threaded · Nota
• http://secunia.com/advisories/21674 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28638 · Nota
• http://osvdb.org/28266 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-4463 · Nota de Segurança
• http://securityreason.com/securityalert/1483 · Nota