PT-2018-16803 · Php · Php Melody

Eln1X · Publicado 2018-01-09 · Atualizado 2018-01-31 · CVE-2018-5211

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PHP Melody version 2.7.1

Description The issue concerns a SQL Injection Time-based attack. This attack can be executed on the "ajax.php" page, specifically targeting the playlist parameter.

Recommendations For PHP Melody version 2.7.1, consider restricting access to the "ajax.php" page or the playlist parameter to minimize the risk of exploitation until a patch is available.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2018-5211

Produtos afetados

Php Melody

Referências · 3

• 🔥 https://exploit-db.com/exploits/43409 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-5211 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-5211 · Aviso do Fabricante