PT-2007-1964 · None · Vote! Pro

R0Ut3R · Publicado 2007-01-26 · Atualizado 2017-10-19 · CVE-2007-0504

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Vote! Pro version 4.0

Description The issue allows remote attackers to execute arbitrary code via the poll id parameter, which is supplied to an eval function call. This is due to an eval injection vulnerability in the poll frame.php script.

Recommendations For Vote! Pro version 4.0, avoid using the poll id parameter in the affected script until the issue is resolved. As a temporary workaround, consider restricting access to the poll frame.php script to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2007-0504

Produtos afetados

Vote! Pro

Referências · 5

• 🔥 https://exploit-db.com/exploits/3180 · Exploit
• http://secunia.com/advisories/23834 · Nota
• http://osvdb.org/31606 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-0504 · Nota de Segurança
• http://vupen.com/english/advisories/2007/0300 · Nota