PT-2006-5668 · Tekman · Tekman Portal

Fix Tr · Publicado 2006-09-21 · Atualizado 2017-10-19 · CVE-2006-4916

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Tekman Portal (TR) version 1.0

Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the uye id parameter in the "uye profil.asp" file.

Recommendations For Tekman Portal (TR) version 1.0, avoid using the uye id parameter in the vulnerable "uye profil.asp" file until the issue is resolved. Consider restricting access to this file to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2006-4916

Produtos afetados

Tekman Portal

Referências · 6

• 🔥 http://securityfocus.com/bid/20102 · Exploit
• 🔥 https://exploit-db.com/exploits/2395 · Exploit
• http://vupen.com/english/advisories/2006/3717 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29028 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-4916 · Nota de Segurança
• http://secunia.com/advisories/22008 · Nota