PT-2012-6230 · Yabsoft · Yabsoft Advanced Image Hosting (Aih) Script

Robert Cooper · Publicado 2012-11-26 · Atualizado 2012-11-27 · CVE-2012-6039

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions YABSoft Advanced Image Hosting (AIH) Script version 2.3

Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the gal parameter in the view comments.php file.

Recommendations For version 2.3, update to a version that fixes this issue to prevent remote attackers from executing arbitrary SQL commands.

Exploit

Correção

RCE

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2012-6039

Produtos afetados

Yabsoft Advanced Image Hosting (Aih) Script

Referências · 6

• 🔥 https://exploit-db.com/exploits/18352 · Exploit
• 🔥 http://exploit-db.com/exploits/18352 · Exploit
• 🔥 http://securityfocus.com/bid/51394 · Exploit
• 🔥 http://osvdb.org/82543 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-6039 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6039 · Nota