PT-2017-14342 · Unknown · Fake Magazine Cover Script

Ihsan Sencan · Publicado 2017-10-31 · Atualizado 2017-11-18 · CVE-2017-15987

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Fake Magazine Cover Script (affected versions not specified)

Description The issue allows SQL Injection via the rate.php value parameter or the content.php id parameter.

Recommendations For all affected versions, consider restricting access to the rate.php and content.php scripts until a patch is available. As a temporary workaround, avoid using the id parameter in the content.php script and the value parameter in the rate.php script until the issue is resolved.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2017-15987

Produtos afetados

Fake Magazine Cover Script

Referências · 2

• 🔥 https://exploit-db.com/exploits/43072 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-15987 · Nota de Segurança