PT-2007-2557 · Sinapis · Sinapis Gastebuch

Kezzap66345 · Publicado 2007-02-27 · Atualizado 2017-10-11 · CVE-2007-1130

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Sinapis Gastebuch version 2.2

Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the fuss parameter in the sinagb.php file.

Recommendations For Sinapis Gastebuch version 2.2, consider restricting access to the sinagb.php file or the fuss parameter to minimize the risk of exploitation until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2007-1130

Produtos afetados

Sinapis Gastebuch

Referências · 6

• 🔥 https://exploit-db.com/exploits/3366 · Exploit
• 🔥 http://securityfocus.com/bid/22696 · Exploit
• http://vupen.com/english/advisories/2007/0737 · Nota
• http://osvdb.org/37007 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32657 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-1130 · Nota de Segurança