PT-2007-4092 · Molyx · Molyx Board

Murderskillz · Publicado 2007-05-21 · Atualizado 2017-10-11 · CVE-2007-2778

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions MolyX BOARD version 2.5.0

Description The issue allows remote attackers to read arbitrary files due to multiple directory traversal vulnerabilities. This can be achieved by including a .. (dot dot) in the lang parameter to "index.php" and other unspecified PHP scripts.

Recommendations For MolyX BOARD version 2.5.0, consider restricting access to the lang parameter in the "index.php" script until a patch is available. As a temporary workaround, avoid using the lang parameter with untrusted input to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2007-2778

Produtos afetados

Molyx Board

Referências · 7

• 🔥 https://exploit-db.com/exploits/3949 · Exploit
• http://vupen.com/english/advisories/2007/1902 · Nota
• http://osvdb.org/36508 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34370 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2778 · Nota de Segurança
• http://secunia.com/advisories/25341 · Nota
• http://securityfocus.com/bid/24046 · Nota