PT-2006-6611 · Funkyasp · Funkyasp Glossary

·

CVE-2006-5946

·

Publicado

2006-11-17

·

Atualizado

2024-02-14

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions FunkyASP Glossary version 1.0
Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the alpha parameter in the demo/glossary/glossary.asp file.
Recommendations For FunkyASP Glossary version 1.0, consider restricting access to the vulnerable glossary.asp file until a patch is available. As a temporary workaround, avoid using the alpha parameter in the affected endpoint.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Identificadores relacionados

CVE-2006-5946

Produtos afetados

Funkyasp Glossary