PT-2007-7383 · Mailmachine · Mailmachine Pro

Mhz91 · Publicado 2007-12-28 · Atualizado 2017-09-29 · CVE-2007-6551

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MailMachine Pro versions 2.2.4 through 2.2.5

Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the showMsg.php file.

Recommendations For MailMachine Pro versions 2.2.4 through 2.2.5, update to version 2.2.6 or later to resolve the issue.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2007-6551

Produtos afetados

Mailmachine Pro

Referências · 8

• 🔥 https://exploit-db.com/exploits/4788 · Exploit
• http://osvdb.org/39638 · Nota
• http://attrition.org/pipermail/vim/2008-January/001873.html · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39211 · Nota
• http://inj3ct-it.org/exploit/MailMachine%20Pro%202.2.4.txt · Nota
• http://securityfocus.com/bid/27030 · Nota
• http://secunia.com/advisories/28232 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-6551 · Nota de Segurança