PT-2011-1978
CVE-2010-5043
·
تاريخ النشر
2011-11-02
·
تاريخ التحديث
2017-08-29
الوصف من
CVSS 2.0
6.0
متوسطةالمقاييسAV:N/AC:M/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
DJ-ArtGallery (com djartgallery) version 0.9.1 for Joomla!
Description
The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved by exploiting the
cid[] parameter in an editItem action to administrator/index.php.Recommendations
For version 0.9.1, avoid using the
cid[] parameter in the editItem action to administrator/index.php until a fix is available. As a temporary workaround, consider restricting access to the administrator/index.php endpoint to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾