PT-2009-1629 · Hispah · Hispah Text Links Ads

Cyb3R-1St · Publicado 2009-02-16 · Atualizado 2017-09-29 · CVE-2008-6154

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Hispah Text Links Ads version 1.1

Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the idcat parameter in the "index.php" file.

Recommendations For Hispah Text Links Ads version 1.1, consider restricting access to the "index.php" file or avoiding the use of the idcat parameter until a patch is available.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2008-6154

Produtos afetados

Hispah Text Links Ads

Referências · 5

• 🔥 http://securityfocus.com/bid/31649 · Exploit
• 🔥 https://exploit-db.com/exploits/6701 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-6154 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45767 · Nota
• http://secunia.com/advisories/32162 · Aviso do Fabricante