PT-2017-6550 · Phpbugtracker · Phpbugtracker

Steffen Rösemann · Publicado 2017-10-06 · Atualizado 2017-10-11 · CVE-2015-2146

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions phpBugTracker versions prior to 1.7.0

Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via several parameters, including the id parameter to "project.php", the group id parameter to "group.php", the status id parameter to "status.php", the resolution id parameter to "resolution.php", the severity id parameter to "severity.php", the priority id parameter to "priority.php", the os id parameter to "os.php", or the site id parameter to "site.php".

Recommendations For phpBugTracker versions prior to 1.7.0, update to version 1.7.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the affected API endpoints, such as "project.php", "group.php", "status.php", "resolution.php", "severity.php", "priority.php", "os.php", and "site.php", until a patch is applied. Avoid using the parameters id, group id, status id, resolution id, severity id, priority id, os id, and site id in the respective affected endpoints until the issue is resolved.

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2015-2146

Produtos afetados

Phpbugtracker

Referências · 3

• https://github.com/a-v-k/phpBugTracker/issues/4 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-2146 · Nota de Segurança
• http://openwall.com/lists/oss-security/2015/02/28/1 · Nota