PT-2008-2004 · Alitalk · Alitalk

Tomplixsee · Publicado 2008-01-22 · Atualizado 2017-09-29 · CVE-2008-0371

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions aliTalk version 1.9.1.1

Description The issue allows remote authenticated users and attackers to execute arbitrary SQL commands. This can be achieved via several parameters, including the mohit parameter to "inc/receivertwo.php", the id parameter to "inc/usercp.php", and the username parameter to "admin/index.php" or "index.php". The vulnerability is related to functions in "functionz/usercp.php" and "functionz/first process.php".

Recommendations For aliTalk version 1.9.1.1, consider disabling the mohit, id, and username parameters in the respective API endpoints until a patch is available. Restrict access to the "inc/receivertwo.php", "inc/usercp.php", "admin/index.php", and "index.php" files to minimize the risk of exploitation. Additionally, enabling magic quotes gpc can help mitigate the issue.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2008-0371

Produtos afetados

Alitalk

Referências · 8

• 🔥 https://exploit-db.com/exploits/4922 · Exploit
• 🔥 http://securityfocus.com/bid/27315 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39733 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-0371 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39745 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39736 · Nota
• http://secunia.com/advisories/28515 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39735 · Nota