PT-2004-1284 · Easydynamicpages · Easydynamicpages

Publicado 2004-01-15 · Atualizado 2017-07-11 · CVE-2004-0073

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions EasyDynamicPages version 2.0

Description The issue allows remote attackers to execute arbitrary PHP code by modifying the edp relative path parameter to reference a URL on a remote web server that contains a malicious serverdata.php script. This is due to a remote file inclusion vulnerability in the config.php and config page.php files.

Recommendations For EasyDynamicPages version 2.0, consider restricting access to the edp relative path parameter to prevent modification and minimize the risk of exploitation. Additionally, avoid using the edp relative path parameter to reference URLs on remote web servers until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2004-0073

Produtos afetados

Easydynamicpages

Referências · 9

• 🔥 http://securityfocus.com/bid/9338 · Exploit
• 🔥 https://exploit-db.com/exploits/23507 · Exploit
• http://securitytracker.com/id?1008584 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14136 · Nota
• http://osvdb.org/3408 · Nota
• http://secunia.com/advisories/10535 · Nota
• http://marc.info/?l=bugtraq&m=107307457327707&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-0073 · Nota de Segurança
• http://osvdb.org/3318 · Nota