PT-2008-3255 · Terong · Terong Php Photo Gallery

T0Pp8Uzz + 1 · Publicado 2008-04-09 · Atualizado 2017-09-29 · CVE-2008-1711

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Terong PHP Photo Gallery (aka Advanced Web Photo Gallery) version 1.0

Description The issue allows context-dependent attackers to obtain sensitive information because passwords are stored in cleartext in a MySQL database.

Recommendations For Terong PHP Photo Gallery (aka Advanced Web Photo Gallery) version 1.0, consider implementing password hashing to securely store user credentials, and restrict access to the MySQL database to minimize the risk of exploitation.

Exploit

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2008-1711

Produtos afetados

Terong Php Photo Gallery

Referências · 4

• 🔥 https://exploit-db.com/exploits/5364 · Exploit
• http://secunia.com/advisories/29667 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-1711 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41820 · Nota