PT-2008-5977 · Oxygen · Oxygen Bulletin Board
CVE-2008-4766
·
Publicado
2008-10-28
·
Atualizado
2017-08-08
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Oxygen Bulletin Board version 1.1.3
Description
The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the
member parameter in the "member.php" file.Recommendations
For Oxygen Bulletin Board version 1.1.3, consider restricting access to the
member.php file until a patch is available. As a temporary workaround, avoid using the member parameter in the affected file to minimize the risk of exploitation.Exploit
Correção
SQL injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Oxygen Bulletin Board