PT-2007-6306 · Alstrasoft · Alstrasoft Affiliate Network Pro

Publicado 2007-10-05 · Atualizado 2018-10-15 · CVE-2007-5223

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: AlstraSoft Affiliate Network Pro (affected versions not specified)

Description: The issue is related to multiple unspecified vulnerabilities that allow remote attackers to include local files and have other unspecified impact. This is due to incorrect input validation or other defects involving certain files and parameters, such as admin/backupstart.php, .sql filenames under admin/admin/dump/, the fl parameter to admin/downloadbackup.php, and the use of .. (dot dot) in the fl parameter to admin/downloadbackup.php.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2007-5223

Produtos afetados

Alstrasoft Affiliate Network Pro

Referências · 8

• http://osvdb.org/42342 · Nota
• http://securityfocus.com/bid/25882 · Nota
• http://vupen.com/english/advisories/2007/3344 · Nota
• http://osvdb.org/42343 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-5223 · Nota de Segurança
• http://securityfocus.com/archive/1/481206/100/0/threaded · Nota
• http://securityreason.com/securityalert/3191 · Nota
• http://osvdb.org/42344 · Nota