PT-2023-9914 · Unknown · Weblabyrinth

CVE-2011-10002 · Publicado 2023-02-07 · Atualizado 2024-05-17

Positive Technologies (AI Summary)

CVSS v2.0

5.2

Média

Vetor base

AV:A/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions weblabyrinth version 0.3.1

Description A critical vulnerability has been found in weblabyrinth, affecting the Labyrinth function of the file labyrinth.inc.php. This issue leads to sql injection.

Recommendations For weblabyrinth version 0.3.1, upgrade to version 0.3.2 to address this issue.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2011-10002

Produtos afetados

Weblabyrinth

Referências · 10

• 🔥 https://code.google.com/archive/p/weblabyrinth/issues/1 · Exploit
• 🔥 https://storage.googleapis.com/google-code-archive-downloads/v2/code.google.com/weblabyrinth/weblabyrinth-0.3.2.tar.gz · Exploit
• https://t.me/cibsecurity/57682 · Publicação no Telegram
• https://vuldb.com/?ctiid.220221 · Nota
• https://t.me/cvenotify/43791 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2011-10002 · Nota de Segurança
• https://t.me/cvenotify/44370 · Publicação no Telegram
• https://github.com/rotelok/weblabyrinth/commit/60793fd8c8c4759596d3510641e96ea40e7f60e9 · Correção
• https://t.me/cvenotify/59363 · Publicação no Telegram
• https://vuldb.com/?id.220221 · Nota