PT-2008-2004 · Alitalk · Alitalk

Tomplixsee · Published 2008-01-22 · Updated 2017-09-29 · CVE-2008-0371

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions aliTalk version 1.9.1.1

Description The issue allows remote authenticated users and attackers to execute arbitrary SQL commands. This can be achieved via several parameters, including the mohit parameter to "inc/receivertwo.php", the id parameter to "inc/usercp.php", and the username parameter to "admin/index.php" or "index.php". The vulnerability is related to functions in "functionz/usercp.php" and "functionz/first process.php".

Recommendations For aliTalk version 1.9.1.1, consider disabling the mohit, id, and username parameters in the respective API endpoints until a patch is available. Restrict access to the "inc/receivertwo.php", "inc/usercp.php", "admin/index.php", and "index.php" files to minimize the risk of exploitation. Additionally, enabling magic quotes gpc can help mitigate the issue.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2008-0371

Affected Products

Alitalk

References · 8

• 🔥 https://exploit-db.com/exploits/4922 · Exploit
• 🔥 http://securityfocus.com/bid/27315 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-0371 · Security Note
• http://secunia.com/advisories/28515 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39733 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39745 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39736 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39735 · Note