PT-2003-1434 · Bttlxe · Bttlxeforum

Saudi_Defacerz · Published 2003-04-26 · Updated 2024-02-14 · CVE-2003-0215

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: bttlxeForum versions 2.0 beta 3 and earlier

Description: The issue allows remote attackers to bypass authentication via the username and password fields, and possibly other fields, due to a SQL injection vulnerability.

Recommendations: For versions 2.0 beta 3 and earlier, update to a version later than 2.0 beta 3 to resolve the issue. As a temporary workaround, consider restricting access to the authentication module to minimize the risk of exploitation. Avoid using the username and password fields in a way that could be exploited until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2003-0215

Affected Products

Bttlxeforum

References · 5

• 🔥 https://exploit-db.com/exploits/22529 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-0215 · Security Note
• http://battleaxesoftware.com/forums/forum.asp?forumid=36&select=1812 · Vendor Advisory
• http://securitytracker.com/id?1006632 · Note
• http://marc.info/?l=bugtraq&m=105120052725940&w=2 · Note