PT-2009-4563 · Unknown · Db Top Sites

Sirgod · Publicado 2009-06-18 · Atualizado 2017-09-29 · CVE-2009-2111

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions DB Top Sites version 1.0

Description A static code injection issue exists, allowing remote attackers to inject arbitrary PHP code. This can be achieved by crafting specific parameters, including the url and location parameters.

Recommendations For DB Top Sites version 1.0, consider restricting access to the add reg.php file until a patch is available. As a temporary workaround, avoid using the url and location parameters in the affected API endpoint.

Exploit

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2009-2111

Produtos afetados

Db Top Sites

Referências · 5

• 🔥 https://exploit-db.com/exploits/8951 · Exploit
• http://secunia.com/advisories/35419 · Aviso do Fabricante
• http://osvdb.org/55119 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-2111 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51121 · Nota