PT-2007-2936 · Metaforum · Metaforum

Gu1Ll4Um3R0M41N · Publicado 2007-03-20 · Atualizado 2018-10-16 · CVE-2007-1552

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MetaForum version 0.513 Beta

Description The issue concerns an unrestricted file upload vulnerability. It allows remote attackers to upload and execute arbitrary scripts by exploiting the fact that the software restricts file types based on the MIME type in the Content-type HTTP header. This can be done by using an image MIME type with a filename containing an executable extension, such as .php.

Recommendations For MetaForum version 0.513 Beta, consider restricting file uploads to only necessary and validated types, and ensure that the validation checks both the MIME type and the file extension to prevent uploading executable scripts. As a temporary workaround, consider disabling the file upload functionality in usercp.php until a proper fix is implemented.

Exploit

Correção

Identificadores relacionados

CVE-2007-1552

Produtos afetados

Metaforum

Referências · 8

• 🔥 http://aeroxteam.fr/exploit-MetaForum-0.513b.txt · Exploit
• 🔥 https://exploit-db.com/exploits/3516 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-1552 · Nota de Segurança
• http://osvdb.org/34523 · Nota
• http://securityfocus.com/bid/23032 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33097 · Nota
• http://securityfocus.com/archive/1/463178/100/0/threaded · Nota
• http://securityreason.com/securityalert/2454 · Nota