PT-2006-6848 · Dev4U · Dev4U Cms

Publicado 2006-12-01 · Atualizado 2018-10-17 · CVE-2006-6218

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions dev4u CMS (affected versions not specified)

Description The issue concerns multiple SQL injection vulnerabilities in the index.php file of dev4u CMS. These vulnerabilities allow remote attackers to execute arbitrary SQL commands by manipulating specific parameters. The vulnerable parameters include seite id, gruppe id.php, and go target.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2006-6218

Produtos afetados

Dev4U Cms

Referências · 5

• 🔥 http://majorsecurity.de/index_2.php?major_rls=major_rls36 · Exploit
• 🔥 http://securityfocus.com/bid/21170 · Exploit
• http://securityfocus.com/archive/1/452008/100/200/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30395 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-6218 · Nota de Segurança