PT-2009-4248 · Bigace · Bigace Cms

Yenh4Cker · Publicado 2009-05-22 · Atualizado 2018-10-10 · CVE-2009-1778

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: BigACE CMS version 2.5

Description: The issue concerns a SQL injection vulnerability in the new user registration feature. This vulnerability allows remote attackers to execute arbitrary SQL commands via the username parameter when magic quotes gpc is disabled.

Recommendations: For BigACE CMS version 2.5, consider disabling the new user registration feature until a patch is available, or ensure that magic quotes gpc is enabled to mitigate the risk of SQL injection attacks. Additionally, restrict access to the registration feature to minimize the risk of exploitation.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2009-1778

Produtos afetados

Bigace Cms

Referências · 7

• 🔥 https://exploit-db.com/exploits/8664 · Exploit
• 🔥 http://securityfocus.com/bid/34920 · Exploit
• http://securityfocus.com/archive/1/503448/100/0/threaded · Nota
• http://secunia.com/advisories/35063 · Aviso do Fabricante
• http://bigace.de/BIGACE-2.6.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-1778 · Nota de Segurança
• http://bigace.de/Security-Fix-for-2.5.html · Aviso do Fabricante