PT-2007-7410 · Php · Php Zlink

Dnx · Publicado 2007-12-28 · Atualizado 2017-09-29 · CVE-2007-6578

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PHP ZLink version 0.3

Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the id parameter.

Recommendations For PHP ZLink version 0.3, avoid using the id parameter in the go.php file until a fix is available. Consider validating and sanitizing user input to prevent SQL injection attacks.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2007-6578

Produtos afetados

Php Zlink

Referências · 5

• 🔥 https://exploit-db.com/exploits/4774 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-6578 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39231 · Nota
• http://osvdb.org/39762 · Nota
• http://securityfocus.com/bid/26997 · Nota