PT-2005-2754 · Funkyasp · Funkyasp Ad System
CVE-2005-1786
·
Publicado
2005-05-25
·
Atualizado
2024-02-14
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
FunkyASP AD System version 1.1
Description
The issue allows remote attackers to execute arbitrary SQL commands and gain privileges. This is achieved via the
password parameter in the admin.asp file.Recommendations
For FunkyASP AD System version 1.1, consider restricting access to the admin.asp file until a patch is available. Avoid using the
password parameter in the affected file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Funkyasp Ad System