PT-2009-2097 · Webbdomain · Webbdomain Webshop

Hakxer · Publicado 2009-04-06 · Atualizado 2017-09-29 · CVE-2008-6627

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions WEBBDOMAIN WebShop versions 1.02 and earlier, version 1.1, version 1.2

Description The issue allows remote attackers to execute arbitrary SQL commands via the username parameter in the "getin.php" file.

Recommendations For versions 1.02 and earlier, version 1.1, and version 1.2, update to a version that fixes this issue to prevent SQL injection attacks.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2008-6627

Produtos afetados

Webbdomain Webshop

Referências · 6

• 🔥 https://exploit-db.com/exploits/6986 · Exploit
• http://securityfocus.com/bid/32108 · Nota
• http://secunia.com/advisories/32499 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46357 · Nota
• http://osvdb.org/49720 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-6627 · Nota de Segurança