PT-2010-1690 · Php Community · Phpcommunity

Publicado 2010-06-11 · Atualizado 2018-10-10 · CVE-2009-4884

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions phpCommunity version 2.1.8

Description The issue allows remote attackers to execute arbitrary SQL commands due to multiple SQL injection vulnerabilities when magic quotes gpc is disabled. This can be achieved via various parameters in different actions to index.php, including the forum id parameter in a forum action, the topic id parameter in a forum action, and the wert parameter in id, nick, or forum search actions. The vulnerable files are related to class forum.php and class search.php.

Recommendations For phpCommunity version 2.1.8, consider disabling the magic quotes gpc option or updating the configuration to prevent SQL injection attacks. As a temporary workaround, restrict access to the index.php file and its related actions, such as forum and search actions, until a patch is available. Avoid using the forum id, topic id, and wert parameters in the affected API endpoints until the issue is resolved.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2009-4884

Produtos afetados

Phpcommunity

Referências · 4

• 🔥 http://exploit-db.com/exploits/8185 · Exploit
• http://securityfocus.com/archive/1/501588/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-4884 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49151 · Nota