PT-2006-5379 · 8Pixel.Net · 8Pixel.Net Simple Blog

Murderskillz + 1 · Publicado 2006-09-06 · Atualizado 2017-10-19 · CVE-2006-4592

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions 8pixel.net Simple Blog versions 2.3 and earlier

Description The issue allows remote attackers to conduct SQL injection attacks via ">" characters in the id parameter, which are not filtered by the protection mechanism in the default.asp file.

Recommendations For versions 2.3 and earlier, consider restricting access to the default.asp file or the id parameter to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid using the id parameter in the affected default.asp file until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2006-4592

Produtos afetados

8Pixel.Net Simple Blog

Referências · 7

• 🔥 http://securityfocus.com/bid/19848 · Exploit
• 🔥 https://exploit-db.com/exploits/2296 · Exploit
• http://securitytracker.com/id?1016793 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-4592 · Nota de Segurança
• http://secunia.com/advisories/21755 · Aviso do Fabricante
• http://vupen.com/english/advisories/2006/3451 · Nota
• http://osvdb.org/28541 · Nota