PT-2006-6316 · Drupal · Extended Tracker

Publicado

2006-10-30

·

Atualizado

2017-07-20

·

CVE-2006-5608

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions: Extended Tracker (xtracker) versions 4.7 before 1.5.2.1 for Drupal
Description: The issue allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to parameters from URLs.
Recommendations: For versions prior to 1.5.2.1, update to version 1.5.2.1 or later to resolve the issue.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2006-5608

Produtos afetados

Extended Tracker