PT-2005-3522 · Unknown · Mediabox404

Cedric Tissieres · Published 2005-08-20 · Updated 2017-07-11 · CVE-2005-2632

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions mediabox404 versions 1.2 and earlier

Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the User field in the login admin mediabox404.php file.

Recommendations For mediabox404 versions 1.2 and earlier, consider restricting access to the login admin mediabox404.php file until a fix is available. As a temporary workaround, avoid using the User field in the affected file to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2005-2632

Affected Products

Mediabox404

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2005-2632 · Security Note
• http://secunia.com/advisories/16493 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=112431321513646&w=2 · Note
• http://securityfocus.com/bid/14593 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/21905 · Note