PT-2005-4997 · Ez · Ezupload Pro

CVE-2005-4309

Publicado

2005-12-17

Atualizado

2017-07-20

CVSS v2.0

7.5

Alta

Vetor

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ezUpload Pro versions 2.2 and earlier

Description The issue allows remote attackers to execute arbitrary SQL commands via unspecified search module parameters in the search module.

Recommendations For ezUpload Pro versions 2.2 and earlier, update to a version later than 2.2 to resolve the issue.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

CVE-2005-4309

Ezupload Pro