PT-2008-4847 · Pmr · Phpmyrealty

Cracker · Publicado 2008-08-04 · Atualizado 2017-09-29 · CVE-2008-3445

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions phpMyRealty (PMR) version 2.0.0

Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the location parameter in the "index.php" file.

Recommendations For phpMyRealty (PMR) version 2.0.0, update to a newer version that contains a fix for this issue.

Exploit

Correção

RCE

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2008-3445

Produtos afetados

Phpmyrealty

Referências · 7

• 🔥 https://exploit-db.com/exploits/6180 · Exploit
• http://secunia.com/advisories/31302 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-3445 · Nota de Segurança
• http://securityreason.com/securityalert/4103 · Nota
• http://securityfocus.com/bid/30484 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44131 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3445 · Nota