PT-2008-2132 · Netwerk · Netwerk Smart Publisher

Gold_M · Publicado 2008-01-31 · Atualizado 2017-09-29 · CVE-2008-0503

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Netwerk Smart Publisher version 1.0.1

Description The issue allows remote attackers to execute arbitrary PHP code. This is achieved via the filedata parameter in the admin/op/disp.php file.

Recommendations For Netwerk Smart Publisher version 1.0.1, avoid using the filedata parameter in the admin/op/disp.php file until a fix is available. As a temporary workaround, consider restricting access to the admin/op/disp.php file to minimize the risk of exploitation.

Exploit

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2008-0503

Produtos afetados

Netwerk Smart Publisher

Referências · 5

• 🔥 https://exploit-db.com/exploits/5003 · Exploit
• http://secunia.com/advisories/28685 · Aviso do Fabricante
• http://vupen.com/english/advisories/2008/0352 · Nota
• http://securityfocus.com/bid/27488 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-0503 · Nota de Segurança