PT-2007-6195 · Helplink · Helplink

Gold_M · Publicado 2007-09-26 · Atualizado 2017-10-19 · CVE-2007-5099

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Helplink version 0.1.0

Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the file parameter in the show.php file.

Recommendations For Helplink version 0.1.0, update the show.php file to validate and sanitize the file parameter to prevent remote file inclusion attacks. As a temporary workaround, consider restricting access to the show.php file until a patch is available.

Exploit

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2007-5099

Produtos afetados

Helplink

Referências · 6

• 🔥 https://exploit-db.com/exploits/4448 · Exploit
• http://vupen.com/english/advisories/2007/3253 · Nota
• http://securityfocus.com/bid/25782 · Nota
• http://osvdb.org/37225 · Nota
• http://secunia.com/advisories/26910 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-5099 · Nota de Segurança