CVE-2019-25765: fallo de gravedad alta en ASP-CMS
ASP-CMS SQL Injection via commentList.asp id Parameter
Publicada el · Actualizada el
63Vexday Risk Score
Prioriza la corrección. Ella explotación observada por VulnCheck y tiene prueba de concepto pública.
ssvc Actcvss 8.7epss 0.7%
de la publicación al arma
Publicada en NVD13 ago
VulnCheck13 ago
probabilidad de explotación
0.7%top 47% de las CVE
explotación observada
síVulnCheck
1 exploit(s) público(s)
ASP-CMS contains a SQL injection vulnerability in the commentList.asp endpoint that allows unauthenticated remote attackers to inject arbitrary SQL by manipulating the id parameter in GET requests to the comment listing script. Attackers can bypass the application's keyword blocklist by interleaving the string 'master' within blocked SQL terms to extract sensitive database contents. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-18 (UTC).
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Productos afectados
ASP-CMS Project · ASP-CMSPoCs públicas encontradas — 1
cve_referenceweb.archive.org/web/20201001011935/https://www.safeinfo.me/2019/07/22/aspcms-lou-dong-ji-he.htmlno verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
https://github.com/projectdiscovery/nuclei-templates/issues/7968https://web.archive.org/web/20201001011935/https://www.safeinfo.me/2019/07/22/aspcms-lou-dong-ji-he.htmlhttps://web.archive.org/web/20220425041152/https://asp-cms.sourceforge.net/https://www.ddpoc.com/DVB-2021-821.htmlhttps://www.vulncheck.com/advisories/asp-cms-sql-injection-via-commentlist-asp-id-parameter