PT-2005-1740 · Aztek · Aztek Forum

Published 2005-03-07 · Updated 2008-09-05 · CVE-2005-0700

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Aztek Forum version 4.0

Description The issue allows remote attackers to obtain database files. This is possibly achieved by setting the ATK ADMIN cookie in the export index action in myadmin.php.

Recommendations For Aztek Forum version 4.0, consider restricting access to the myadmin.php file and the export index action to prevent unauthorized database file access. As a temporary workaround, avoid using the export index action until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2005-0700

Affected Products

Aztek Forum

References · 4

• 🔥 https://exploit-db.com/exploits/860 · Exploit
• 🔥 http://frsirt.com/exploits/20050307.aztek.c.php · Exploit
• http://securityfocus.com/bid/12745 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-0700 · Security Note