PT-2007-5292 · Vikingboard · Vikingboard

Publicado 2007-07-30 · Atualizado 2017-07-29 · CVE-2007-4089

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Vikingboard version 0.1.2

Description The issue allows remote attackers to obtain sensitive information by exploiting the debug parameter in various components, including the "/forum.php" and "/cp.php" API endpoints.

Recommendations For Vikingboard version 0.1.2, consider disabling access to the debug parameter in the affected API endpoints, such as "/forum.php" and "/cp.php", until a patch is available. Restrict access to these endpoints to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2007-4089

Produtos afetados

Vikingboard

Referências · 11

• 🔥 https://exploit-db.com/exploits/30388 · Exploit
• 🔥 http://lostmon.blogspot.com/2007/07/vikingboard-debug-information.html · Exploit
• 🔥 http://lostmon.blogspot.com/2007/07/vikingboard-multiple-cross-site.html · Exploit
• 🔥 https://exploit-db.com/exploits/30387 · Exploit
• http://secwatch.org/advisories/1018567 · Nota
• http://osvdb.org/36903 · Nota
• http://securityfocus.com/bid/25060 · Nota
• http://secunia.com/advisories/26196 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35602 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-4089 · Nota de Segurança
• http://osvdb.org/36902 · Nota