PT-2004-3087 · Unknown · Turbo Traffic Trader Php

Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-2192

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Turbo Traffic Trader PHP version 1.0

Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the ttt admin parameter in the tttadmin/settings.php file.

Recommendations For Turbo Traffic Trader PHP version 1.0, consider restricting access to the tttadmin/settings.php file until a patch is available. As a temporary workaround, avoid using the ttt admin parameter in the affected file to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2004-2192

Affected Products

Turbo Traffic Trader Php

References · 7

• 🔥 http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0296.html · Exploit
• http://secunia.com/advisories/12785 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-2192 · Security Note
• http://securityfocus.com/bid/11358 · Note
• http://osvdb.org/10639 · Note
• http://securitytracker.com/id?1011609 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17676 · Note