PT-2017-14256 · Gideon Pine · Gpweb

Publicado 2017-12-18 · Atualizado 2019-10-03 · CVE-2017-15877

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GPWeb version 8.4.61

Description The issue is related to insecure permissions in the db.php file, allowing remote attackers to access sensitive information, including passwords and user databases.

Recommendations For GPWeb version 8.4.61, update the permissions of the db.php file to restrict access and prevent unauthorized viewing of the password and user database.

Exploit

Correção

Incorrect Permission

Enumeração de Fraquezas

CWE-732

Identificadores relacionados

CVE-2017-15877

Produtos afetados

Gpweb

Referências · 3

• 🔥 https://augustopereira.com.br/blog/seguranca-gpweb-8-4-61-multiplas-falhas-sqli-manipulacao-de-privilegios-uploads-sem-restricoes-exposicao-de-informacao-sensivel · Exploit
• https://osv.dev/vulnerability/CVE-2017-15877 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-15877 · Nota de Segurança