PT-2007-7416 · 1024 · 1024 Cms

Irk4Z · Publicado 2007-12-28 · Atualizado 2017-09-29 · CVE-2007-6584

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions 1024 CMS versions 1.3.1 through 1.4.2 beta

Description The issue allows remote attackers to include and execute arbitrary local files via directory traversal vulnerabilities. This can be achieved by exploiting the lang parameter to /pages/print/default/ops/news.php, the theme dir parameter to /pages/download/default/ops/search.php, or the admin theme dir parameter to download.php, forum.php, or news.php in admin/ops/reports/ops/. The vulnerability is exploited using a .. (dot dot) in the respective parameters.

Recommendations For 1024 CMS versions 1.3.1 through 1.4.2 beta, as a temporary workaround, consider restricting access to the vulnerable parameters lang, theme dir, and admin theme dir until a patch is available. Avoid using the .. (dot dot) notation in these parameters to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2007-6584

Produtos afetados

1024 Cms

Referências · 11

• 🔥 https://exploit-db.com/exploits/4765 · Exploit
• 🔥 https://exploit-db.com/exploits/5434 · Exploit
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6584 · Nota
• http://securityfocus.com/bid/28753 · Nota
• http://osvdb.org/41282 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-6584 · Nota de Segurança
• http://osvdb.org/41280 · Nota
• http://secunia.com/advisories/29810 · Aviso do Fabricante
• http://osvdb.org/41284 · Nota
• http://osvdb.org/41283 · Nota
• http://osvdb.org/41281 · Nota