PT-2007-7380 · Runcms · Runcms

Alexandr Polyakov + 1 · Publicado 2007-12-28 · Atualizado 2018-10-15 · CVE-2007-6548

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions RunCMS versions prior to 1.6.1

Description The issue allows remote authenticated administrators to inject arbitrary PHP code via several parameters in different modules, including header and footer parameters to modules/system/admin.php, disclaimer parameters to various modules, and the intro parameter to modules/sections/admin/index.php. These injections lead to PHP sequences being written into cache files within the modules directory, potentially allowing for code execution.

Recommendations For RunCMS versions prior to 1.6.1, update to version 1.6.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable parameters and modules, such as disabling the header and footer parameters in modules/system/admin.php, and avoiding the use of disclaimer parameters in affected modules until the update is applied. Additionally, restrict write access to cache files in the modules directory to minimize the risk of exploitation.

Exploit

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2007-6548

Produtos afetados

Runcms

Referências · 12

• 🔥 https://exploit-db.com/exploits/4790 · Exploit
• 🔥 http://securityfocus.com/bid/27019 · Exploit
• http://osvdb.org/41251 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6548 · Nota
• http://osvdb.org/41247 · Nota
• http://securityreason.com/securityalert/3493 · Nota
• http://runcms.org/modules/mydownloads/singlefile.php?lid=131 · Nota
• http://osvdb.org/41249 · Nota
• http://osvdb.org/41250 · Nota
• http://securityfocus.com/archive/1/485512/100/0/threaded · Nota
• http://osvdb.org/41248 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-6548 · Nota de Segurança