PT-2008-5383 · Atlassian · Stash

Ircrash + 1 · Published 2008-09-15 · Updated 2020-12-28 · CVE-2008-4080

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Stash version 1.0.3

Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the username parameter to "admin/library/authenticate.php" and the download parameter to "downloadmp3.php", when magic quotes gpc is disabled.

Recommendations For Stash version 1.0.3, consider disabling the username and download parameters in the respective API endpoints until a patch is available. Restrict access to "admin/library/authenticate.php" and "downloadmp3.php" to minimize the risk of exploitation. Avoid using the username and download parameters in the affected endpoints until the issue is resolved.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2008-4080

Affected Products

Stash

References · 9

• 🔥 https://exploit-db.com/exploits/6402 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-4080 · Security Note
• http://secunia.com/advisories/31818 · Vendor Advisory
• http://securityfocus.com/bid/31079 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44989 · Note
• http://securityfocus.com/archive/1/496142/100/0/threaded · Note
• http://securityreason.com/securityalert/4252 · Note
• https://youtube.com/watch?v=mm4bfsZdLmA&t=1h53m · Note
• http://osvdb.org/47994 · Note