PT-2008-3323 · Prozilla · Prozilla Top 100

T0Pp8Uzz + 1 · Published 2008-04-15 · Updated 2017-09-29 · CVE-2008-1785

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Prozilla Top 100 version 1.2

Description The issue allows remote authenticated users to delete statistics and accounts of arbitrary users. This is achieved by modifying the s parameter in the "delete.php" file.

Recommendations For Prozilla Top 100 version 1.2, restrict access to the "delete.php" file to prevent unauthorized modifications to the s parameter until a fix is available. As a temporary workaround, consider implementing authentication and authorization checks to ensure only authorized users can delete statistics and accounts.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2008-1785

Affected Products

Prozilla Top 100

References · 4

• 🔥 https://exploit-db.com/exploits/5384 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-1785 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41674 · Note
• http://vupen.com/english/advisories/2008/1119/references · Note