PT-2008-4883 · Phpx · Phpx

Gnix · Published 2008-08-06 · Updated 2017-09-29 · CVE-2008-3489

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PHPX version 3.5.16

Description A SQL injection issue exists in the checkCookie function, located in includes/functions.inc.php, allowing remote attackers to execute arbitrary SQL commands by manipulating the PXL cookie.

Recommendations For PHPX version 3.5.16, consider disabling the checkCookie function until a patch is available to prevent exploitation. Restrict access to the includes/functions.inc.php file to minimize the risk of SQL injection attacks. Avoid using the PXL cookie in the affected function until the issue is resolved.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2008-3489

Affected Products

Phpx

References · 5

• 🔥 https://exploit-db.com/exploits/6176 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-3489 · Security Note
• http://securityfocus.com/bid/30478 · Note
• http://securityreason.com/securityalert/4112 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44240 · Note