PT-2006-4024 · Apache · Mod Mime

Publicado 2006-06-21 · Atualizado 2018-10-18 · CVE-2006-3128

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:N/AC:H/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions easy-CMS version 0.1.2

Description The issue allows remote attackers to execute arbitrary PHP code by uploading a PHP file with a GIF file extension, then directly accessing that file in the Repositories directory. This is possible because the choose file.php script does not restrict uploads of filenames with multiple extensions when mod mime is installed.

Recommendations For easy-CMS version 0.1.2, restrict the upload of files with multiple extensions in the choose file.php script to prevent the execution of arbitrary PHP code. Consider validating and sanitizing uploaded file names to ensure they do not contain malicious extensions.

Correção

Identificadores relacionados

CVE-2006-3128

Produtos afetados

Mod Mime

Referências · 9

• https://nvd.nist.gov/vuln/detail/CVE-2006-3128 · Nota de Segurança
• http://osvdb.org/26633 · Nota
• http://biyosecurity.be/bugs/easycms.txt · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27281 · Nota
• http://securityfocus.com/archive/1/437705/100/0/threaded · Nota
• http://vupen.com/english/advisories/2006/2419 · Nota
• http://secunia.com/advisories/20733 · Aviso do Fabricante
• http://securitytracker.com/id?1016335 · Nota
• http://securityfocus.com/bid/18496 · Nota