PT-2003-2482 · Postnuke · Postnuke

Publicado 2003-12-31 · Atualizado 2008-09-05 · CVE-2003-1537

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions PostNuke versions 0.723 and earlier

Description A directory traversal issue allows remote attackers to include arbitrary files named theme.php via the theme parameter to "index.php".

Recommendations For PostNuke versions 0.723 and earlier, update to a version later than 0.723 to resolve the issue.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2003-1537

Produtos afetados

Postnuke

Referências · 2

• 🔥 http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0117.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-1537 · Nota de Segurança