PT-2010-2232 · Files2Links · Files2Links F2L 3000

Publicado 2010-02-02 · Atualizado 2017-08-17 · CVE-2010-0469

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Files2Links F2L 3000 appliance version 4.0.0

Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands via unspecified parameters to the "login page" API endpoint.

Recommendations For version 4.0.0, consider restricting access to the login page until a fix is available. As a temporary workaround, avoid using unspecified parameters in the login page API endpoint.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2010-0469

Produtos afetados

Files2Links F2L 3000

Referências · 6

• 🔥 http://packetstormsecurity.org/1001-advisories/DDIVRT-2009-27.txt · Exploit
• http://secunia.com/advisories/38310 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/55950 · Nota
• http://osvdb.org/61976 · Nota
• http://archives.neohapsis.com/archives/fulldisclosure/2010-01/0499.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-0469 · Nota de Segurança