PT-2010-1748 · Adpeeps · Adpeeps

Publicado 2010-07-22 · Atualizado 2018-10-10 · CVE-2009-4945

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions AdPeeps version 8.5d1

Description The issue allows remote attackers to gain access due to a default password set to admin for the admin account. This can be exploited via requests to "index.php".

Recommendations For AdPeeps version 8.5d1, change the default password of the admin account to a strong and unique password to prevent unauthorized access.

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2009-4945

Produtos afetados

Adpeeps

Referências · 5

• http://securityfocus.com/archive/1/503911/100/0/threaded · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4945 · Nota
• http://forum.intern0t.net/intern0t-advisories/1049-intern0t-adpeeps-8-5d1-cross-site-scripting-html-injection-vulnerabilities.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-4945 · Nota de Segurança
• http://securityfocus.com/archive/1/503855/100/0/threaded · Nota