PT-2009-1304 · Web Scribble Solutions · Webclassifieds

Angel25Dz · Publicado 2009-01-02 · Atualizado 2024-03-19 · CVE-2008-5817

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Web Scribble Solutions webClassifieds 2005

Description The issue concerns SQL injection vulnerabilities in the index.php file of webClassifieds 2005. Remote attackers can execute arbitrary SQL commands by manipulating the user and password fields in a sign in action.

Recommendations For webClassifieds 2005, consider validating and sanitizing user input for the user and password fields to prevent SQL injection attacks. As a temporary workaround, restrict access to the sign in action until a proper fix is applied.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2008-5817

Produtos afetados

Webclassifieds

Referências · 8

• 🔥 https://exploit-db.com/exploits/7602 · Exploit
• http://securityreason.com/securityalert/4860 · Nota
• https://twitter.com/CVEnew/status/1770128450939998542 · Publicação no Twitter
• http://secunia.com/advisories/33337 · Aviso do Fabricante
• http://securityfocus.com/bid/33028 · Nota
• https://twitter.com/VulmonFeeds/status/1770160574292164673 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2008-5817 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47629 · Nota