PT-2008-3323 · Prozilla · Prozilla Top 100

T0Pp8Uzz + 1 · Publicado 2008-04-15 · Atualizado 2017-09-29 · CVE-2008-1785

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Prozilla Top 100 version 1.2

Description The issue allows remote authenticated users to delete statistics and accounts of arbitrary users. This is achieved by modifying the s parameter in the "delete.php" file.

Recommendations For Prozilla Top 100 version 1.2, restrict access to the "delete.php" file to prevent unauthorized modifications to the s parameter until a fix is available. As a temporary workaround, consider implementing authentication and authorization checks to ensure only authorized users can delete statistics and accounts.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2008-1785

Produtos afetados

Prozilla Top 100

Referências · 4

• 🔥 https://exploit-db.com/exploits/5384 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41674 · Nota
• http://vupen.com/english/advisories/2008/1119/references · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-1785 · Nota de Segurança