PT-2006-5883 · Olate · Olate Download

Hessam Salehi + 1 · Published 2006-10-02 · Updated 2018-10-17 · CVE-2006-5145

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions OlateDownload version 3.4.0

Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the page parameter in "details.php" or the query parameter in "search.php".

Recommendations For OlateDownload version 3.4.0, update to a version that fixes the SQL injection vulnerabilities in details.php and search.php. As a temporary workaround, consider restricting access to the details.php and search.php files until a patch is available. Avoid using the page parameter in details.php and the query parameter in search.php until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2006-5145

Affected Products

Olate Download

References · 8

• 🔥 https://exploit-db.com/exploits/28730 · Exploit
• 🔥 https://exploit-db.com/exploits/28731 · Exploit
• 🔥 http://securityfocus.com/bid/20278 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-5145 · Security Note
• http://securityreason.com/securityalert/1680 · Note
• http://securityfocus.com/archive/1/447424/100/0/threaded · Note
• http://secunia.com/advisories/22241 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29294 · Note