PT-2007-2056 · Aztek · Aztek Forum

Publicado 2007-01-30 · Atualizado 2018-10-16 · CVE-2007-0598

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Aztek Forum version 4.00

Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the fid cookie in the forum.php endpoint.

Recommendations For Aztek Forum version 4.00, update to a newer version that contains a fix for this issue. As a temporary workaround, consider restricting access to the forum.php endpoint to minimize the risk of exploitation. Avoid using the fid cookie in the forum.php endpoint until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2007-0598

Produtos afetados

Aztek Forum

Referências · 6

• 🔥 http://acid-root.new.fr/poc/21070125.txt · Exploit
• 🔥 https://exploit-db.com/exploits/3196 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-0598 · Nota de Segurança
• http://securityfocus.com/archive/1/458076/100/0/threaded · Nota
• http://securityfocus.com/archive/1/458123/100/0/threaded · Nota
• http://osvdb.org/33595 · Nota