PT-2007-6785 · Dm · Dm Guestbook

Gold_M · Publicado 2007-11-05 · Atualizado 2017-09-29 · CVE-2007-5821

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions DM Guestbook versions 0.4.1 and earlier

Description The issue allows remote attackers to include and execute arbitrary local files via directory traversal vulnerabilities. This can be achieved by including a .. (dot dot) in specific parameters, such as the lng parameter to certain API endpoints like "guestbook.php", "admin/admin.guestbook.php", or "auto/glob new.php", or the lngdefault parameter to "auto/ch lng.php".

Recommendations For DM Guestbook versions 0.4.1 and earlier, as a temporary workaround, consider restricting access to the vulnerable API endpoints, specifically "guestbook.php", "admin/admin.guestbook.php", "auto/glob new.php", and "auto/ch lng.php", until a patch is available. Avoid using the lng and lngdefault parameters in these endpoints to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2007-5821

Produtos afetados

Dm Guestbook

Referências · 9

• 🔥 https://exploit-db.com/exploits/4597 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38219 · Nota
• http://osvdb.org/39065 · Nota
• http://osvdb.org/39064 · Nota
• http://osvdb.org/39066 · Nota
• http://vupen.com/english/advisories/2007/3747 · Nota
• http://securityfocus.com/bid/26300 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-5821 · Nota de Segurança
• http://osvdb.org/39067 · Nota