A vulnerability, which was classified as critical, has been found in X10media X10 Automatic Mp3 Script up to 1.6. This issue affects some unknown processing of the file download.php of the component Search Engine. The manipulation of the argument url leads to improper access controls.
The identification of this vulnerability is CVE-2008-6960. The attack may be initiated remotely. Furthermore, there is an exploit available.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2008-6960 | X10media X10 Automatic Mp3 Script up to 1.6 Search Engine download.php url access control (EDB-7074 / XFDB-46489)
A vulnerability, which was classified as critical, has been found in X10media X10 Automatic Mp3 Script up to 1.6. This issue affects some unknown processing of…
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
Compliance, SLA & Vendor Adherence
Advisory-Prüfung · Score-Einordnung · Fristen
Advisory Radar
In herstellerseitiger Prüfung
Hersteller-Sicherheitsmeldungen & Patch-Status
Handlungsempfehlung für Administratoren
Hersteller-Advisory noch nicht formal hinterlegt. Regelmäßiges Re-Scanning der CTI-Quellen anberaumt.
Referenzen aus der Primärquelle („Verifiziert" nur bei Hersteller-Domäne):
- Keine herstellerspezifischen Bulletins in der Primärquelle hinterlegt.