PT-2019-17966 · Php Scripts Mall · Php Scripts Mall Advance Peer To Peer Mlm Script

Publicado 2019-01-11 · Atualizado 2020-08-24 · CVE-2019-6126

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Advance Peer to Peer MLM Script version 1.7.0

Description The issue allows remote attackers to bypass intended access restrictions. This can be achieved by directly navigating to "admin/dashboard.php" or "admin/user.php", resulting in the disclosure of information about users and staff.

Recommendations For PHP Scripts Mall Advance Peer to Peer MLM Script version 1.7.0, consider restricting access to the "admin/dashboard.php" and "admin/user.php" endpoints to minimize the risk of exploitation. Additionally, review and implement proper access controls to prevent unauthorized access to sensitive information.

Exploit

Correção

Enumeração de Fraquezas

CWE-425

Identificadores relacionados

CVE-2019-6126

Produtos afetados

Php Scripts Mall Advance Peer To Peer Mlm Script

Referências · 3

• 🔥 https://github.com/Mad-robot/CVE-List/blob/master/Advance%20Peer%20to%20Peer%20MLM%20Script.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-6126 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-6126 · Aviso do Fabricante