PT-2008-3465 · W1L3D4+1 · Philboard

U238 · Publicado 2008-04-24 · Atualizado 2017-09-29 · CVE-2008-1939

Mitre

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Multiple SQL injection vulnerabilities in W1L3D4 Philboard 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) id and (2) topic parameters to (a) philboard reply.asp, and the (3) forumid parameter to (b) philboard newtopic.asp, different vectors than CVE-2007-2641 and CVE-2007-0920.

Exploit

Correção

RCE

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2008-1939

Produtos afetados

Philboard

Referências · 6

• 🔥 https://exploit-db.com/exploits/5475 · Exploit
• 🔥 http://securityfocus.com/bid/28871 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-1939 · Nota de Segurança
• http://vupen.com/english/advisories/2008/1340/references · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1939 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41957 · Nota