PT-2007-3891 · Noah · Noah

Kezzap66345 · Publicado 2007-05-09 · Atualizado 2017-10-11 · CVE-2007-2572

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions NoAh (aka PHP Content Architect, phparch) versions 0.9 through 1.2 and earlier

Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the tpls[1] parameter in the modules/noevents/templates/mfa theme.php file.

Recommendations For NoAh (aka PHP Content Architect, phparch) versions 0.9 through 1.2 and earlier, update to a version newer than 1.2 to resolve the issue.

Exploit

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2007-2572

Produtos afetados

Noah

Referências · 5

• 🔥 https://exploit-db.com/exploits/3861 · Exploit
• http://osvdb.org/37656 · Nota
• http://vupen.com/english/advisories/2007/1676 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2572 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34103 · Nota