PT-2009-4275 · Mycolex · Mycolex

Yenh4Cker · Publicado 2009-05-29 · Atualizado 2017-09-29 · CVE-2009-1810

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Média

Vetor base

AV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: myColex version 1.4.2

Description: The issue allows remote attackers to execute arbitrary SQL commands, potentially leading to unauthorized data access or modification. This can be achieved via the formUser parameter (also known as the Name field) in the /common/login.php endpoint. Additionally, remote authenticated users can exploit the vulnerability through the ID parameter in a Detail action to various PHP files, including kategorie.php, medium.php, person.php, or schlagwort.php in the modules/ directory. The vulnerability is related to the classes/class.perform.php file.

Recommendations: For myColex version 1.4.2, consider restricting access to the /common/login.php endpoint and the modules/ directory to minimize the risk of exploitation. As a temporary workaround, avoid using the formUser parameter and the ID parameter in the affected PHP files until a patch is available.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2009-1810

Produtos afetados

Mycolex

Referências · 6

• 🔥 https://exploit-db.com/exploits/8707 · Exploit
• 🔥 http://securityfocus.com/bid/34997 · Exploit
• http://secunia.com/advisories/35111 · Aviso do Fabricante
• http://vupen.com/english/advisories/2009/1344 · Nota
• http://collector.ch/drupal5/?q=node/39 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-1810 · Nota de Segurança