PT-2008-1983 · Unknown · Evilsentinel

Blackhawk · Publicado 2008-01-17 · Atualizado 2017-09-29 · CVE-2008-0350

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Evilsentinel versions 1.0.9 and earlier

Description The issue allows remote attackers to gain administrative privileges and make arbitrary configuration changes due to a problem in the admin/index.php file, which sends a redirect to the web browser but does not exit.

Recommendations For versions 1.0.9 and earlier, update to a version that fixes this issue to prevent administrative privilege escalation and arbitrary configuration changes.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2008-0350

Produtos afetados

Evilsentinel

Referências · 5

• 🔥 https://exploit-db.com/exploits/4884 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-0350 · Nota de Segurança
• http://securityfocus.com/bid/27227 · Nota
• http://evilsentinel.altervista.org/forum/index.php?topic=49.0 · Nota
• http://secunia.com/advisories/28427 · Correção