CVE-2011-1556

Опубликовано: 04 апр. 2011

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

SQL injection vulnerability in plugins/pdfClasses/pdfgen.php in Andy's PHP Knowledgebase (Aphpkb) 0.95.4 allows remote attackers to execute arbitrary SQL commands via the pdfa parameter.

Ссылки

http://secunia.com/advisories/43879
Vendor Advisory
http://www.autosectools.com/Advisories/Andy%27s.PHP.Knowledgebase.Project.0.95.4_SQL.Injection_161.html
Exploit
http://www.exploit-db.com/exploits/17061/
Exploit
http://www.osvdb.org/71287
Exploit
http://www.vupen.com/english/advisories/2011/0823
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/66386
http://secunia.com/advisories/43879
Vendor Advisory
http://www.autosectools.com/Advisories/Andy%27s.PHP.Knowledgebase.Project.0.95.4_SQL.Injection_161.html
Exploit
http://www.exploit-db.com/exploits/17061/
Exploit
http://www.osvdb.org/71287
Exploit
http://www.vupen.com/english/advisories/2011/0823
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/66386

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:aphpkb:aphpkb:0.95.4:*:*:*:*:*:*:*

EPSS

Процентиль: 81%

0.01606

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-x84h-fcr4-jgx6

github

больше 3 лет назад