PT-2008-1864 · Php · Php Webquest

Ka0X · Publicado 2008-01-10 · Atualizado 2017-09-29 · CVE-2008-0219

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PHP Webquest version 2.6

Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the id actividad parameter in the soporte horizontal w.php file.

Recommendations For PHP Webquest version 2.6, avoid using the id actividad parameter in the soporte horizontal w.php file until a fix is available. Consider implementing input validation and sanitization for the id actividad parameter to prevent SQL injection attacks.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2008-0219

Produtos afetados

Php Webquest

Referências · 5

• 🔥 http://securityfocus.com/bid/27192 · Exploit
• 🔥 https://exploit-db.com/exploits/4867 · Exploit
• http://secunia.com/advisories/26821 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-0219 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39560 · Nota