PT-2009-1304 · Web Scribble Solutions · Webclassifieds

Angel25Dz · Published 2009-01-02 · Updated 2024-03-19 · CVE-2008-5817

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Web Scribble Solutions webClassifieds 2005

Description The issue concerns SQL injection vulnerabilities in the index.php file of webClassifieds 2005. Remote attackers can execute arbitrary SQL commands by manipulating the user and password fields in a sign in action.

Recommendations For webClassifieds 2005, consider validating and sanitizing user input for the user and password fields to prevent SQL injection attacks. As a temporary workaround, restrict access to the sign in action until a proper fix is applied.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2008-5817

Affected Products

Webclassifieds

References · 8

• 🔥 https://exploit-db.com/exploits/7602 · Exploit
• http://secunia.com/advisories/33337 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-5817 · Security Note
• http://securityreason.com/securityalert/4860 · Note
• https://twitter.com/CVEnew/status/1770128450939998542 · Twitter Post
• http://securityfocus.com/bid/33028 · Note
• https://twitter.com/VulmonFeeds/status/1770160574292164673 · Twitter Post
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47629 · Note