Detections
Analytics
ttCMS 2.2 Multiple Vulnerabilities
high Nessus Plugin ID 11636
Language:
Synopsis
The remote host has a PHP script that is affected by multiple vulnerabilities.Description
The remote server is running a version of ttCMS that is prone to code injection as well as SQL injection attacks.An attacker may use these flaws to execute arbitrary PHP code on this host or to take the control of the remote database.
Solution
Upgrade to the latest version of ttCMS.Plugin Details
Severity: High
ID: 11636
File Name: ttcms_code_injection.nasl
Version: 1.23
Type: remote
Family: CGI abuses
Published: 5/19/2003
Updated: 1/19/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 5.9
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS Score Source: CVE-2003-1458
CVSS v3
Risk Factor: High
Base Score: 7.3
Temporal Score: 6.6
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C
Vulnerability Information
Required KB Items: www/PHP
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Ease: No exploit is required
Reference Information
CVE: CVE-2003-1458, CVE-2003-1459