PT-2006-7023 · Dolibarr · Dolibarr
Publicado
2006-12-10
·
Atualizado
2008-09-05
·
CVE-2006-6414
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Dol Storye (affected versions not specified)
Description
The issue concerns SQL injection vulnerabilities in the dettaglio.asp file of Dol Storye. Remote attackers can execute arbitrary SQL commands by manipulating the
id doc or id aut parameters.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Dolibarr