PT-2014-2303
CVE-2012-5243
·
تاريخ النشر
2014-10-21
·
تاريخ التحديث
2014-10-24
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Banana Dance versions B.2.6 and earlier
Description
The issue allows remote attackers to read arbitrary database information via a crafted request to the
functions/suggest.php endpoint.Recommendations
For Banana Dance versions B.2.6 and earlier, consider restricting access to the
functions/suggest.php endpoint until a patch is available. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾