PT-2007-4285 · Inout · Inout Meta Search Engine

Blackhawk · Publicado 2007-06-01 · Atualizado 2018-10-16 · CVE-2007-2988

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Inout Meta Search Engine (affected versions not specified)

Description: The issue concerns a certain admin script in the software that fails to exit when administrative credentials are missing. This allows remote attackers to inject arbitrary PHP code. The exploitation can be demonstrated by sending a request to "admin/create engine.php" followed by a request to "admin/generate tabs.php".

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2007-2988

Produtos afetados

Inout Meta Search Engine

Referências · 8

• 🔥 https://exploit-db.com/exploits/4004 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-2988 · Nota de Segurança
• http://osvdb.org/42034 · Nota
• http://securityfocus.com/archive/1/469808/100/0/threaded · Nota
• http://securityfocus.com/bid/24189 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34563 · Nota
• http://securityfocus.com/bid/24199 · Nota
• http://securityreason.com/securityalert/2763 · Nota