PT-2005-2616 · Sigma · Sigma Isp Manager
CVE-2005-1639
·
Publicado
2005-05-17
·
Atualizado
2024-02-14
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Sigma ISP Manager version 6.6
Description
The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved by manipulating the
username, password, or domain fields.Recommendations
For Sigma ISP Manager version 6.6, consider restricting access to the vulnerable fields until a patch is available. As a temporary workaround, avoid using the
username, password, or domain fields in a way that could allow SQL injection attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Sigma Isp Manager