PT-2007-1542 · Geckovich · Geckovich Tasktracker Pro

Ajann · Publicado 2007-01-04 · Atualizado 2017-10-19 · CVE-2007-0049

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Geckovich TaskTracker Pro versions 1.5 and earlier

Description The issue allows remote attackers to add administrative or other accounts via an Add action with a modified GroupID in a direct request to "Customize.asp".

Recommendations For Geckovich TaskTracker Pro versions 1.5 and earlier, consider restricting access to the Customize.asp endpoint until a fix is available. As a temporary workaround, limit the ability to add new accounts or modify existing ones to prevent potential exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2007-0049

Produtos afetados

Geckovich Tasktracker Pro

Referências · 6

• 🔥 https://exploit-db.com/exploits/3068 · Exploit
• 🔥 http://securityfocus.com/bid/21847 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-0049 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31235 · Nota
• http://secunia.com/advisories/23564 · Aviso do Fabricante
• http://osvdb.org/31682 · Nota