PT-2005-2591 · Openbb · Openbb

Megasky · Published 2005-05-16 · Updated 2016-10-18 · CVE-2005-1612

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions OpenBB version 1.0.8

Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. The issue is exploited via the TID parameter in the "read.php" file.

Recommendations For OpenBB version 1.0.8, avoid using the TID parameter in the read.php file until a fix is available. Consider restricting access to the read.php file to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2005-1612

Affected Products

Openbb

References · 4

• 🔥 http://securityfocus.com/bid/13624 · Exploit
• 🔥 https://exploit-db.com/exploits/25656 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-1612 · Security Note
• http://marc.info/?l=bugtraq&m=111601780332632&w=2 · Note