PT-2007-6240 · Puzzle Apps · Puzzle Apps Cms
Arfis
·
Publicado
2007-10-01
·
Atualizado
2008-09-05
·
CVE-2007-5147
CVSS v2.0
6.8
Média
| Vetor | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Puzzle Apps CMS version 2.2.1
Description
The issue allows remote attackers to execute arbitrary PHP code. This can be achieved via a URL in the
MODULEDIR parameter to various PHP files, including 'core/modules/my/my.module.php' and 'core/modules/xml/xml.module.php'. Additionally, the COREROOT parameter in files such as 'config.loader.php', 'platform.loader.php', and others in the 'core/' directory or 'install/steps/step 3.php' can be exploited. The THISDIR parameter in files like 'people.lib.php', 'general.lib.php', and others in 'core/modules/admin/libs/' or 'core/modules/webstat/MEC/index.php' is also vulnerable.Recommendations
For Puzzle Apps CMS version 2.2.1, consider disabling the
MODULEDIR, COREROOT, and THISDIR parameters in the affected PHP files until a patch is available. Restrict access to the vulnerable modules and files, such as 'my.module.php', 'xml.module.php', 'config.loader.php', and others, to minimize the risk of exploitation. Avoid using the MODULEDIR, COREROOT, and THISDIR parameters in the affected API endpoints until the issue is resolved.Correção
Code Injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Puzzle Apps Cms