PT-2005-2753 · Zongg · Zongg
CVE-2005-1785
·
Publicado
2005-05-31
·
Atualizado
2024-02-14
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
ZonGG version 1.2
Description
A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the
password parameter in the "ad/login.asp" endpoint.Recommendations
For ZonGG version 1.2, avoid using the
password parameter in the affected endpoint until the issue is resolved. Consider temporarily restricting access to the "ad/login.asp" endpoint to minimize the risk of exploitation.Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Zongg