PT-2006-5883 · Olate · Olate Download

Hessam Salehi + 1 · Publicado 2006-10-02 · Atualizado 2018-10-17 · CVE-2006-5145

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions OlateDownload version 3.4.0

Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the page parameter in "details.php" or the query parameter in "search.php".

Recommendations For OlateDownload version 3.4.0, update to a version that fixes the SQL injection vulnerabilities in details.php and search.php. As a temporary workaround, consider restricting access to the details.php and search.php files until a patch is available. Avoid using the page parameter in details.php and the query parameter in search.php until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2006-5145

Produtos afetados

Olate Download

Referências · 8

• 🔥 https://exploit-db.com/exploits/28730 · Exploit
• 🔥 https://exploit-db.com/exploits/28731 · Exploit
• 🔥 http://securityfocus.com/bid/20278 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-5145 · Nota de Segurança
• http://securityreason.com/securityalert/1680 · Nota
• http://securityfocus.com/archive/1/447424/100/0/threaded · Nota
• http://secunia.com/advisories/22241 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29294 · Nota