PT-2008-2315 · Bookmarkx · Bookmarkx Script

S@Bun · Publicado 2008-02-12 · Atualizado 2017-09-29 · CVE-2008-0695

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions BookmarkX script 2007

Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the topicid parameter in a "showtopic" action within the index.php file.

Recommendations For BookmarkX script 2007, consider restricting access to the topicid parameter in the "showtopic" action to minimize the risk of exploitation. As a temporary workaround, avoid using the topicid parameter in the affected index.php file until the issue is resolved.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2008-0695

Produtos afetados

Bookmarkx Script

Referências · 2

• 🔥 https://exploit-db.com/exploits/5040 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-0695 · Nota de Segurança