PT-2007-6826 · Idmos · Idmos

Publicado 2007-11-08 · Atualizado 2018-10-15 · CVE-2007-5889

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IDMOS version 1.0 Alpha

Description The issue allows remote attackers to execute arbitrary PHP code. This can be achieved by providing a URL in the site absolute path parameter to specific API endpoints, including "admin.php", "menu add.php", and "menu operation.php" in the administrator directory.

Recommendations For IDMOS version 1.0 Alpha, consider restricting access to the admin.php, menu add.php, and menu operation.php files in the administrator directory to minimize the risk of exploitation. Avoid using the site absolute path parameter in these API endpoints until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2007-5889

Produtos afetados

Idmos

Referências · 7

• http://osvdb.org/38736 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38294 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-5889 · Nota de Segurança
• http://osvdb.org/38735 · Nota
• http://securityfocus.com/archive/1/483351/100/0/threaded · Nota
• http://securityreason.com/securityalert/3345 · Nota
• http://osvdb.org/38737 · Nota