PT-2009-6275 · Unknown · Radio Istek Scripti

Kurdish Hackers Team · Publicado 2009-11-28 · Atualizado 2009-12-02 · CVE-2009-4096

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions RADIO istek scripti version 2.5

Description The issue allows remote attackers to obtain user credentials due to insufficient access control of sensitive information stored under the web root. This can be achieved via a direct request for estafresgaftesantusyan.inc.

Recommendations For version 2.5, restrict access to sensitive information stored under the web root to prevent unauthorized access. Consider implementing proper access controls to protect user credentials. As a temporary workaround, consider restricting direct requests for estafresgaftesantusyan.inc until a more permanent solution is available.

Exploit

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2009-4096

Produtos afetados

Radio Istek Scripti

Referências · 6

• 🔥 https://exploit-db.com/exploits/10231 · Exploit
• 🔥 http://packetstormsecurity.org/0911-exploits/istek-disclose.txt · Exploit
• 🔥 http://exploit-db.com/exploits/10231 · Exploit
• http://secunia.com/advisories/37478 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-4096 · Nota de Segurança
• http://osvdb.org/60516 · Nota