PT-2007-3246 · Sonicbb · Sonicbb

Jesper Jurcenoks · Publicado 2007-05-14 · Atualizado 2018-10-16 · CVE-2007-1901

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: SonicBB version 1.0

Description: The issue allows remote attackers to obtain sensitive information. This is achieved via the by[] parameter to "search.php", the p[] parameter to "viewforum.php", and the id parameter to either "viewforum.php" or "members.php". The installation path is revealed in the resulting error message.

Recommendations: For SonicBB version 1.0, as a temporary workaround, consider restricting access to the "search.php", "viewforum.php", and "members.php" scripts until a patch is available. Avoid using the by[] and p[] parameters in the affected API endpoints, and restrict the use of the id parameter in "viewforum.php" and "members.php" to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2007-1901

Produtos afetados

Sonicbb

Referências · 11

• http://secunia.com/advisories/25279 · Nota
• http://osvdb.org/33906 · Nota
• http://vupen.com/english/advisories/2007/1816 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-1901 · Nota de Segurança
• http://osvdb.org/34701 · Nota
• http://securityfocus.com/archive/1/468535/100/0/threaded · Nota
• http://osvdb.org/34702 · Nota
• http://marc.info/?l=full-disclosure&m=117914586003786&w=2 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34259 · Nota
• http://netvigilance.com/advisory0018 · Aviso do Fabricante
• http://osvdb.org/34703 · Nota