PT-2006-2552 · Vsns · Vsns Lemon

Aliaksandr Hartsuyeu

·

CVE-2006-1553

·

Publicado

2006-03-31

·

Atualizado

2018-10-18

CVSS v2.0

5.1

Média

VetorAV:N/AC:H/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions: VSNS Lemon version 3.2.0
Description: A SQL injection issue exists in the functions/final functions.php file, allowing remote attackers to execute arbitrary SQL commands when magic quotes gpc is disabled. This is achieved by manipulating the id parameter.
Recommendations: For VSNS Lemon version 3.2.0, consider disabling the id parameter in the affected function until a patch is available, or enable magic quotes gpc to prevent SQL injection attacks.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2006-1553

Produtos afetados

Vsns Lemon