PT-2009-4045 · Qt Company · Qt

Ahmadbady · Publicado 2009-05-06 · Atualizado 2017-09-29 · CVE-2009-1551

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Qt quickteam 2

Description: The issue allows remote attackers to execute arbitrary PHP code. This is achieved via a URL in the qte web path parameter to "qte web.php" and the qte root parameter to "bin/qte init.php".

Recommendations: For Qt quickteam 2, consider disabling the qte web.php and bin/qte init.php scripts until a patch is available. Restrict access to the qte web path and qte root parameters to minimize the risk of exploitation. Avoid using the qte web path and qte root parameters in the affected API endpoints until the issue is resolved.

Exploit

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2009-1551

Produtos afetados

Qt

Referências · 6

• 🔥 https://exploit-db.com/exploits/8602 · Exploit
• http://secunia.com/advisories/34997 · Nota
• http://vupen.com/english/advisories/2009/1247 · Nota
• http://osvdb.org/54218 · Nota
• http://osvdb.org/54217 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-1551 · Nota de Segurança