PT-2009-3325 · Aspthai.Net · Aspthai.Net Webboard

Daimon · Publicado 2009-02-23 · Atualizado 2017-09-29 · CVE-2009-0703

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ASPTHAI.Net Webboard version 6.0

Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. The issue is related to the id parameter in the "bview.asp" file.

Recommendations For ASPTHAI.Net Webboard version 6.0, avoid using the id parameter in the bview.asp file until a fix is available. Consider restricting access to the bview.asp file to minimize the risk of exploitation.

Exploit

Correção

RCE

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2009-0703

Produtos afetados

Aspthai.Net Webboard

Referências · 6

• 🔥 http://securityfocus.com/bid/33084 · Exploit
• 🔥 https://exploit-db.com/exploits/7635 · Exploit
• http://secunia.com/advisories/34099 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0703 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-0703 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47722 · Nota