PT-2009-1409 · Isweb · Cms Isweb

Xados · Publicado 2009-01-21 · Atualizado 2017-09-29 · CVE-2008-5934

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions CMS ISWEB version 3.0

Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the id sezione parameter in the index.php file.

Recommendations For CMS ISWEB version 3.0, avoid using the id sezione parameter in the index.php file until a fix is available. Consider implementing input validation and sanitization for the id sezione parameter to prevent SQL injection attacks.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2008-5934

Produtos afetados

Cms Isweb

Referências · 5

• 🔥 https://exploit-db.com/exploits/7465 · Exploit
• 🔥 http://securityfocus.com/bid/32823 · Exploit
• http://securityreason.com/securityalert/4933 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-5934 · Nota de Segurança
• http://secunia.com/advisories/33090 · Aviso do Fabricante