PT-2007-6070 · Kwsphp · Kwsphp

S4Mi · Published 2007-09-18 · Updated 2017-09-29 · CVE-2007-4956

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions KwsPHP version 1.0

Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the pseudo parameter to "login.php", the id parameter to "index.php" in a carnet editer action in the Member Space (espace membre) module, or the typenav parameter to "index.php" in a browser aff action in the stats module.

Recommendations For KwsPHP version 1.0, consider restricting access to the "login.php", "index.php" in the Member Space module, and "index.php" in the stats module to minimize the risk of exploitation. Avoid using the pseudo, id, and typenav parameters in the affected API endpoints until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2007-4956

Affected Products

Kwsphp

References · 12

• 🔥 https://exploit-db.com/exploits/4413 · Exploit
• 🔥 https://exploit-db.com/exploits/4412 · Exploit
• 🔥 https://exploit-db.com/exploits/4414 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-4956 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36636 · Note
• http://koogar.alorys-hebergement.com/kwsphp/index.php?mod=news&ac=commentaires&id=29 · Note
• http://osvdb.org/37180 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36634 · Note
• http://securityfocus.com/bid/25679 · Note
• http://osvdb.org/37182 · Note
• http://secunia.com/advisories/26850 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36635 · Note