PT-2008-1994 · Gradman · Gradman

Joss · Publicado 2008-01-18 · Atualizado 2018-10-15 · CVE-2008-0361

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions GradMan versions 0.1.3 and earlier

Description The issue allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the tabla parameter in the agregar info.php file.

Recommendations For GradMan versions 0.1.3 and earlier, avoid using the tabla parameter in the affected agregar info.php file until the issue is resolved. As a temporary workaround, consider restricting access to the agregar info.php file to minimize the risk of exploitation.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2008-0361

Produtos afetados

Gradman

Referências · 7

• 🔥 https://exploit-db.com/exploits/4926 · Exploit
• http://securityfocus.com/bid/27324 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39732 · Nota
• http://securityfocus.com/archive/1/486444/100/0/threaded · Nota
• http://securityreason.com/securityalert/3552 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-0361 · Nota de Segurança
• http://secunia.com/advisories/28520 · Aviso do Fabricante