PT-2007-3759 · Postnuke · Postnuke Pnflashgames Module

Mehmet Ince · Publicado 2007-05-02 · Atualizado 2017-10-11 · CVE-2007-2427

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PostNuke pnFlashGames module version 1.5

Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the cid parameter in the index.php file of the pnFlashGames module.

Recommendations For PostNuke pnFlashGames module version 1.5, consider restricting access to the index.php file until a patch is available, and avoid using the cid parameter in the vulnerable endpoint.

Exploit

Correção

Identificadores relacionados

CVE-2007-2427

Produtos afetados

Postnuke Pnflashgames Module

Referências · 7

• 🔥 http://securityfocus.com/bid/23701 · Exploit
• 🔥 https://exploit-db.com/exploits/3813 · Exploit
• http://vupen.com/english/advisories/2007/1581 · Nota
• http://secunia.com/advisories/25043 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2427 · Nota de Segurança
• http://osvdb.org/35474 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33960 · Nota