PT-2001-2357 · Unknown · Adrotate Pro

Published 2001-12-23 · Updated 2008-09-05 · CVE-2001-1224

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions AdRotate Pro version 2.0

Description The issue allows remote attackers to modify the database and possibly execute arbitrary commands via a SQL code injection attack in the get input function of adrotate.pm.

Recommendations For AdRotate Pro version 2.0, consider disabling the get input function in adrotate.pm until a patch is available to prevent potential SQL code injection attacks.

Fix

Related Identifiers

CVE-2001-1224

Affected Products

Adrotate Pro

References · 4

• http://securityfocus.com/bid/3739 · Vendor Advisory
• http://iss.net/security_center/static/7736.php · Vendor Advisory
• http://securityfocus.com/archive/1/246994 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-1224 · Security Note