PT-2008-4883 · Phpx · Phpx

Gnix · Publicado 2008-08-06 · Atualizado 2017-09-29 · CVE-2008-3489

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PHPX version 3.5.16

Description A SQL injection issue exists in the checkCookie function, located in includes/functions.inc.php, allowing remote attackers to execute arbitrary SQL commands by manipulating the PXL cookie.

Recommendations For PHPX version 3.5.16, consider disabling the checkCookie function until a patch is available to prevent exploitation. Restrict access to the includes/functions.inc.php file to minimize the risk of SQL injection attacks. Avoid using the PXL cookie in the affected function until the issue is resolved.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2008-3489

Produtos afetados

Phpx

Referências · 5

• 🔥 https://exploit-db.com/exploits/6176 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-3489 · Nota de Segurança
• http://securityfocus.com/bid/30478 · Nota
• http://securityreason.com/securityalert/4112 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44240 · Nota