PT-2008-1578 · Phpautovideo · Phpautovideo

Mhz91 · Publicado 2008-01-03 · Atualizado 2017-10-19 · CVE-2007-6615

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions phpAutoVideo version 2.21

Description A directory traversal issue exists, allowing remote attackers to include and execute arbitrary local files. This is achieved by using directory traversal sequences in the selected provider parameter.

Recommendations For phpAutoVideo version 2.21, consider restricting access to the includes/block.php file until a patch is available. As a temporary workaround, avoid using the selected provider parameter in the affected API endpoint until the issue is resolved.

Exploit

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2007-6615

Produtos afetados

Phpautovideo

Referências · 7

• 🔥 https://exploit-db.com/exploits/4782 · Exploit
• 🔥 http://securityfocus.com/bid/27023 · Exploit
• http://secunia.com/advisories/28230 · Aviso do Fabricante
• http://vupen.com/english/advisories/2007/4319 · Nota
• http://osvdb.org/39618 · Nota
• http://forums.agaresmedia.com/viewtopic.php?f=13&t=407 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-6615 · Nota de Segurança