PT-2008-3077 · Danneo · Danneo Cms

Inateam · Publicado 2008-03-25 · Atualizado 2017-09-29 · CVE-2008-1513

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Danneo CMS versions 0.5.1 and earlier

Description The issue allows remote attackers to execute arbitrary SQL commands via the HTTP Referer header when the Referers statistics option is enabled.

Recommendations For Danneo CMS versions 0.5.1 and earlier, consider disabling the Referers statistics option until a patch is available.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2008-1513

Produtos afetados

Danneo Cms

Referências · 3

• 🔥 https://exploit-db.com/exploits/5239 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-1513 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41153 · Nota