PT-2008-6704 · Myiosoft · Myiosoft Easybookmarker

G4N0K · Publicado 2008-12-17 · Atualizado 2017-10-19 · CVE-2008-5651

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MyioSoft EasyBookMarker version 4.0

Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the Parent parameter in the plugins/bookmarker/bookmarker backend.php file.

Recommendations For MyioSoft EasyBookMarker version 4.0, consider restricting access to the bookmarker backend.php file until a patch is available. As a temporary workaround, avoid using the Parent parameter in the affected plugin to minimize the risk of exploitation.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2008-5651

Produtos afetados

Myiosoft Easybookmarker

Referências · 7

• 🔥 http://securityfocus.com/bid/32200 · Exploit
• 🔥 https://exploit-db.com/exploits/7053 · Exploit
• http://vupen.com/english/advisories/2008/3075 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-5651 · Nota de Segurança
• http://secunia.com/advisories/32636 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46474 · Nota
• http://osvdb.org/49690 · Nota