Language:
http://www.saintcorporation.com/cgi-bin/exploit_info/traq_authenticate
Severity: High
ID: 62892
File Name: traq_authenticate_function_code_execution.nasl
Version: 1.9
Type: remote
Family: CGI abuses
Published: 11/12/2012
Updated: 4/11/2022
Configuration: Enable thorough checks
Risk Factor: High
Base Score: 7.5
Temporal Score: 6.2
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
Temporal Vector: CVSS2#E:F/RL:OF/RC:C
Risk Factor: High
Base Score: 8.8
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CPE: x-cpe:/a:traq:traq
Required KB Items: www/traq, www/PHP
Exploit Available: true
Exploit Ease: Exploits are available
Exploited by Nessus: true
Patch Publication Date: 12/2/2011
Vulnerability Publication Date: 12/7/2011
Metasploit (Traq admincp/common.php Remote Code Execution)
Elliot (Traq 2.3 RCE)
BID: 50961