PT-2007-2151 · Acgvannu · Acgvannu

Publicado 2007-02-03 · Atualizado 2017-07-29 · CVE-2007-0698

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ACGVannu versions 1.3 and earlier

Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the id mod parameter to the "templates/modif.html" endpoint. The estimated number of potentially affected devices and details about real-world incidents are not specified.

Recommendations For versions 1.3 and earlier, avoid using the id mod parameter in the "templates/modif.html" endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2007-0698

Produtos afetados

Acgvannu

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2007-0698 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32257 · Nota
• http://vupen.com/english/advisories/2007/0388 · Nota
• http://osvdb.org/34666 · Nota