PT-2007-2866 · Groupit · Groupit

Dedi Dwianto + 1 · Publicado 2007-03-16 · Atualizado 2018-10-16 · CVE-2007-1472

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Groupit version 2.00b5

Description The issue allows remote attackers to conduct remote file inclusion attacks and execute arbitrary PHP code via arguments that are written to $ GLOBALS. This can be achieved by manipulating the c basepath parameter in various PHP files, including "content.php", "userprofile.php", "password.php", "dispatch.php", and "deliver.php" in the html/ directory, and possibly "load.inc.php" and related files.

Recommendations For Groupit version 2.00b5, consider restricting access to the vulnerable PHP files until a patch is available. As a temporary workaround, avoid using the c basepath parameter in the affected API endpoints, such as "content.php", "userprofile.php", "password.php", "dispatch.php", and "deliver.php", to minimize the risk of exploitation.

Exploit

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2007-1472

Produtos afetados

Groupit

Referências · 10

• 🔥 http://attrition.org/pipermail/vim/2007-March/001435.html · Exploit
• 🔥 https://exploit-db.com/exploits/3486 · Exploit
• http://securityreason.com/securityalert/2428 · Nota
• http://osvdb.org/34476 · Nota
• http://attrition.org/pipermail/vim/2007-March/001436.html · Nota
• http://securityfocus.com/archive/1/462918/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-1472 · Nota de Segurança
• http://advisories.echo.or.id/adv/adv75-theday-2007.txt · Nota
• http://vupen.com/english/advisories/2007/0995 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33000 · Nota