PT-2007-2717 · Li · Li-Guestbook

CVE-2007-1302

·

Publicado

2007-03-07

·

Atualizado

2024-02-14

CVSS v2.0

6.8

Média

VetorAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions LI-Guestbook versions 1.1 through 1.2
Description The issue allows remote attackers to execute arbitrary SQL commands via the country parameter in the guestbook.php file when magic quotes gpc is disabled.
Recommendations For versions 1.1 and 1.2, consider disabling the guestbook.php file or restricting access to it until a patch is available. Avoid using the country parameter in the affected guestbook.php file until the issue is resolved.

Correção

SQL injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2007-1302

Produtos afetados

Li-Guestbook