PT-2006-7143 · Bluetrait · Bluetrait

Publicado 2006-12-14 · Atualizado 2017-07-29 · CVE-2006-6540

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Bluetrait versions prior to 1.2.0

Description The issue allows remote attackers to execute arbitrary SQL commands when trackback is enabled. This is achieved via unspecified parameters in the bt-trackback.php file.

Recommendations For versions prior to 1.2.0, update to version 1.2.0 or later to resolve the issue. As a temporary workaround, consider disabling the trackback feature until a patch is available.

Correção

Identificadores relacionados

CVE-2006-6540

Produtos afetados

Bluetrait

Referências · 5

• http://secunia.com/advisories/23316 · Aviso do Fabricante
• http://bluetrait.org/weblog/changelog.txt · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2006-6540 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30842 · Nota
• http://vupen.com/english/advisories/2006/4960 · Nota