PT-2006-5608 · Haberx · Haberx

Fix Tr · Publicado 2006-09-19 · Atualizado 2017-10-19 · CVE-2006-4853

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Haberx versions 1.02 through 1.1

Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in "kategorihaberx.asp".

Recommendations For Haberx versions 1.02 through 1.1, avoid using the id parameter in the "kategorihaberx.asp" endpoint until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2006-4853

Produtos afetados

Haberx

Referências · 7

• 🔥 https://exploit-db.com/exploits/2371 · Exploit
• 🔥 http://securityfocus.com/bid/20038 · Exploit
• http://vupen.com/english/advisories/2006/3661 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28988 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-4853 · Nota de Segurança
• http://secunia.com/advisories/21960 · Aviso do Fabricante
• http://packetstorm.linuxsecurity.com/0609-exploits/haberx.txt · Nota