PT-2012-5897 · Mavili · Mavili Guestbook

Massive Panda · Publicado 2012-10-04 · Atualizado 2017-08-29 · CVE-2012-5298

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mavili Guestbook version as released in November 2007

Description The issue concerns insufficient access control to the guestbook.mdb database. This allows remote attackers to read the database by making a direct request to it.

Recommendations For the version as released in November 2007, consider restricting access to the guestbook.mdb file to prevent remote reading of the database.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2012-5298

Produtos afetados

Mavili Guestbook

Referências · 5

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2012-01/0010.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-5298 · Nota de Segurança
• http://securityfocus.com/bid/51252 · Nota
• http://code.google.com/p/maviliguestbook/issues/detail?id=1 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/72101 · Nota