PT-2009-6178 · Unknown · Com Siirler

V3N0M · Publicado 2009-11-18 · Atualizado 2017-09-19 · CVE-2009-3972

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions com siirler version 1.2 RC

Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the sid parameter in an sdetay action to "index.php".

Recommendations For version 1.2 RC, avoid using the sid parameter in the "index.php" endpoint until the issue is resolved.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2009-3972

Produtos afetados

Com Siirler

Referências · 5

• 🔥 https://exploit-db.com/exploits/9510 · Exploit
• 🔥 http://securityfocus.com/bid/36127 · Exploit
• 🔥 http://exploit-db.com/exploits/9510 · Exploit
• http://vupen.com/english/advisories/2009/2407 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-3972 · Nota de Segurança