PT-2004-2446 · Phpkit · Phpkit

Steve · Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-1538

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PHPKIT versions 1.6.03 through 1.6.1

Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the include.php file.

Recommendations For PHPKIT versions 1.6.03 through 1.6.1, update to a version that contains a fix for this issue to prevent remote attackers from executing arbitrary SQL commands.

Exploit

Fix

Related Identifiers

CVE-2004-1538

Affected Products

Phpkit

References · 6

• 🔥 http://securityfocus.com/bid/11725 · Exploit
• http://secunia.com/advisories/13262 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-1538 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18205 · Note
• http://marc.info/?l=bugtraq&m=110117116115493&w=2 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1538 · Note