PT-2005-5005 · Limbo · Limbo Cms

Rgod · Publicado 2005-12-17 · Atualizado 2018-10-19 · CVE-2005-4317

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Limbo CMS versions 1.0.4.2 and earlier

Description The issue allows remote attackers to modify the $ SERVER variable, which can be used to conduct cross-site scripting (XSS) attacks in the stats module or execute arbitrary code via an eval injection attack in the wrapper option in "index2.php". This is possible when the register globals setting is off.

Recommendations For Limbo CMS versions 1.0.4.2 and earlier, as a temporary workaround, consider disabling the eval function in the wrapper option in "index2.php" until a patch is available. Restrict access to the stats module to minimize the risk of XSS attacks. Avoid using the SERVER[REMOTE ADDR] parameter in sensitive operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2005-4317

Produtos afetados

Limbo Cms

Referências · 11

• 🔥 https://exploit-db.com/exploits/26836 · Exploit
• 🔥 http://rgod.altervista.org/limbo1042_xpl.html · Exploit
• 🔥 http://securitytracker.com/id?1015364 · Exploit
• 🔥 http://securityfocus.com/bid/15871 · Exploit
• http://vupen.com/english/advisories/2005/2932 · Nota
• http://osvdb.org/21754 · Nota
• http://osvdb.org/21756 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-4317 · Nota de Segurança
• http://securityfocus.com/archive/1/419470/100/0/threaded · Nota
• http://securityreason.com/securityalert/255 · Nota
• http://secunia.com/advisories/18063 · Aviso do Fabricante