PT-2004-2239 · Phpbb · Phpbb

Psotfx · Publicado 2004-11-12 · Atualizado 2017-07-11 · CVE-2004-1315

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: phpBB versions prior to 2.0.11

Description: The issue allows remote attackers to execute arbitrary PHP code by exploiting the improper URL decoding of the highlight parameter in the viewtopic.php file. This is achieved by double-encoding the highlight value, which results in special characters being inserted into the processed result. The vulnerability was exploited by the Santy.A worm.

Recommendations: For versions prior to 2.0.11, update to version 2.0.11 or later to resolve the issue. As a temporary workaround, consider restricting access to the viewtopic.php file or disabling the highlight parameter to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2004-1315

Produtos afetados

Phpbb

Referências · 18

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/phpbb_highlight.rb · Exploit
• 🔥 https://exploit-db.com/exploits/24274 · Exploit
• 🔥 https://exploit-db.com/exploits/12510 · Exploit
• 🔥 https://exploit-db.com/exploits/16890 · Exploit
• 🔥 https://exploit-db.com/exploits/647 · Exploit
• http://marc.info/?l=bugtraq&m=110365752909029&w=2 · Nota
• http://kb.cert.org/vuls/id/497400 · Correção
• http://secunia.com/advisories/13239 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=110029415208724&w=2 · Nota
• http://securityfocus.com/bid/10701 · Nota
• https://security.gentoo.org/glsa/200411-32 · Aviso do Fabricante
• http://marc.info/?t=110079440800004&r=1&w=2 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18052 · Nota
• http://phpbb.com/phpBB/viewtopic.php?t=240513 · Aviso do Fabricante
• http://us-cert.gov/cas/techalerts/TA04-356A.html · Correção