PT-2005-2074 · Modernbill · Modernbill

James Bercegay · Publicado 2005-04-12 · Atualizado 2017-07-11 · CVE-2005-1054

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ModernBill versions 4.3.0 and earlier

Description The issue allows remote attackers to execute arbitrary PHP code by modifying the DIR parameter in the news.php file to reference a URL on a remote web server that contains the code. This can be done by accessing the /news.php endpoint and manipulating the DIR parameter to point to a malicious PHP script hosted on a remote server.

Recommendations For ModernBill versions 4.3.0 and earlier, update to a version later than 4.3.0 to resolve the issue. As a temporary workaround, consider restricting access to the news.php file and limiting the ability to modify the DIR parameter to prevent remote code execution.

Exploit

Correção

Identificadores relacionados

CVE-2005-1054

Produtos afetados

Modernbill

Referências · 8

• 🔥 http://securitytracker.com/id?1013672 · Exploit
• 🔥 https://exploit-db.com/exploits/25376 · Exploit
• http://secunia.com/advisories/14890 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=111323741032183&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-1054 · Nota de Segurança
• http://osvdb.org/15427 · Nota
• http://gulftech.org/?node=research&article_id=00067-04102005 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20036 · Nota