PT-2008-4306 · E Topbiz · E-Topbiz Viral Dx

Hussin X · Publicado 2008-06-26 · Atualizado 2017-09-29 · CVE-2008-2867

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions E-topbiz Viral DX version 2.07

Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the bannerid parameter in the "adclick.php" file.

Recommendations For version 2.07, consider restricting access to the adclick.php file or avoiding the use of the bannerid parameter until a fix is available.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2008-2867

Produtos afetados

E-Topbiz Viral Dx

Referências · 6

• 🔥 http://securityfocus.com/bid/29921 · Exploit
• 🔥 https://exploit-db.com/exploits/5929 · Exploit
• http://secunia.com/advisories/30793 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43342 · Nota
• http://vupen.com/english/advisories/2008/1922/references · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-2867 · Nota de Segurança