VDB-96620 · CVE-2017-20127 · EDB-ID 41167

KB Login Authentication Script 1.1 username/password sql injektion

En kritisksvag punkt hittades i KB Login Authentication Script 1.1. Som påverkar en okänd funktion. Manipulering av argumenten username/password med ingången 'or''=' en okänd ingång leder till en sårbarhet klass sql injektion svag punkt. Den rådgivande finns tillgänglig för nedladdning på exploit-db.com. Denna svaga punkt behandlas som CVE-2017-20127. Attacken på nätet kan. Det finns tekniska detaljer känd. Han deklarerade proof-of-concept. Den exploit kan laddas ner från exploit-db.com. En möjlig åtgärd har utfärdats före och inte bara efter offentliggörandet.

Tidslinje

Användare

1	39

Fält

source_cve_nvd_summary	2
source_cve_assigned	1
cna_responsible	1
source_cve	1
vulnerability_cwe	1

Commit Conf

100%	39
90%	7
70%	3
98%	2

Approve Conf

100%	39
90%	7
70%	3
98%	2

ID	Engagerad	Användare	Fält	Förändra	Anmärkningar	Accepterad	Status	C
13250680	11/11/2022	VulD...	cve_nvd_summary	A vulnerability was found in KB Login Authentication Script 1.1 and classified as critical. Affected by this issue is some unknown functionality. The manipulation of the argument username/password with the input 'or''=' leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.	cvedetails.com	11/11/2022	accepterad	70
13250679	11/11/2022	VulD...	cve_nvd_summary	A vulnerability was found in KB Login Authentication Script 1.1 and classified as critical. Affected by this issue is some unknown functionality. The manipulation of the argument username/password with the input 'or''=' leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.	cve.mitre.org	11/11/2022	accepterad	70
13250678	11/11/2022	VulD...	cve_assigned	1656367200 (28/06/2022)	cve.mitre.org	11/11/2022	accepterad	70
12660460	28/06/2022	VulD...	responsible	VulDB		28/06/2022	accepterad	100
12660459	28/06/2022	VulD...	cve	CVE-2017-20127	cve.org	28/06/2022	accepterad	100
6372009	11/08/2020	VulD...	cwe	89 (sql injektion)		11/08/2020	accepterad	90
6372008	11/08/2020	VulD...	exploitdb_date	1485388800 (26/01/2017)	exploit-db.com	11/08/2020	accepterad	100
6372015	08/02/2017	VulD...	cvss3_vuldb_rc	R	see CVSS documentation	08/02/2017	accepterad	90
6372014	08/02/2017	VulD...	cvss3_vuldb_rl	X	see CVSS documentation	08/02/2017	accepterad	90
6372013	08/02/2017	VulD...	cvss3_vuldb_e	P	see CVSS documentation	08/02/2017	accepterad	90
6372012	08/02/2017	VulD...	cvss2_vuldb_rc	UR	see CVSS documentation	08/02/2017	accepterad	90
6372011	08/02/2017	VulD...	cvss2_vuldb_rl	ND	see CVSS documentation	08/02/2017	accepterad	90
6372010	08/02/2017	VulD...	cvss2_vuldb_e	POC	see CVSS documentation	08/02/2017	accepterad	90
6372007	08/02/2017	VulD...	exploitdb	41167	exploit-db.com	08/02/2017	accepterad	100
6372006	08/02/2017	VulD...	price_0day	$0-$5k	see exploit price documentation	08/02/2017	accepterad	100
6372005	08/02/2017	VulD...	developer_name	Ihsan Sencan		08/02/2017	accepterad	100
6372004	08/02/2017	VulD...	url	https://www.exploit-db.com/exploits/41167/	exploit-db.com	08/02/2017	accepterad	100
6372003	08/02/2017	VulD...	publicity	1		08/02/2017	accepterad	98
6372002	08/02/2017	VulD...	date	1485388800 (26/01/2017)		08/02/2017	accepterad	100
6372001	08/02/2017	VulD...	availability	1		08/02/2017	accepterad	100

31 fler poster visas inte

🔒 Login Required

You need to signup and login to see more of the remaining 31 results.

◂ Tidigare Översikt Nästa ▸

Do you need the next level of professionalism?

Upgrade your account now!