PT-2008-2257 · Lightblog · Lightblog

Omni · Publicado 2008-02-06 · Atualizado 2018-10-15 · CVE-2008-0632

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions LightBlog version 9.5

Description The issue allows remote attackers to execute arbitrary code by uploading a file with an executable extension to the blog's root directory via the cp upload image.php script, and then accessing it directly.

Recommendations For LightBlog version 9.5, consider restricting or disabling the cp upload image.php script until a patch is available to prevent remote attackers from uploading executable files. Additionally, restrict access to the blog's root directory to minimize the risk of exploitation.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2008-0632

Produtos afetados

Lightblog

Referências · 7

• 🔥 https://exploit-db.com/exploits/5033 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-0632 · Nota de Segurança
• http://securityfocus.com/archive/1/487398/100/0/threaded · Nota
• http://omni.netsons.org/blog/?p=11 · Nota
• http://securityreason.com/securityalert/3617 · Nota
• http://securityfocus.com/bid/27562 · Nota
• http://secunia.com/advisories/28734 · Aviso do Fabricante