PT-2008-5142 · Matterdaddy · Matterdaddy Market

~!Dok_Tor!~ · Publicado 2008-08-26 · Atualizado 2017-09-29 · CVE-2008-3783

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Matterdaddy Market version 1.1

Description The issue concerns SQL injection vulnerabilities in the index.php file of Matterdaddy Market. When the magic quotes gpc setting is disabled, remote attackers can execute arbitrary SQL commands by manipulating the category and type parameters.

Recommendations For Matterdaddy Market version 1.1, consider disabling the category and type parameters in the index.php file until a patch is available, or enable the magic quotes gpc setting to prevent SQL injection attacks.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2008-3783

Produtos afetados

Matterdaddy Market

Referências · 6

• 🔥 http://securityfocus.com/bid/30809 · Exploit
• 🔥 https://exploit-db.com/exploits/6297 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44630 · Nota
• http://secunia.com/advisories/31564 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-3783 · Nota de Segurança
• http://securityreason.com/securityalert/4185 · Nota