PT-2008-2436 · Freephpgallery · Freephpgallery

Mhz91 · Publicado 2008-02-19 · Atualizado 2017-09-29 · CVE-2008-0818

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions freePHPgallery version 0.6

Description The issue concerns multiple directory traversal vulnerabilities. These vulnerabilities allow remote attackers to include and execute arbitrary local files. The attack can be performed by including a .. (dot dot) in the lang cookie to specific API endpoints: "comment.php", "index.php", and "show.php".

Recommendations For freePHPgallery version 0.6, consider restricting access to the "comment.php", "index.php", and "show.php" endpoints until a patch is available. As a temporary workaround, validate and sanitize the lang cookie to prevent directory traversal attacks.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2008-0818

Produtos afetados

Freephpgallery

Referências · 6

• 🔥 https://exploit-db.com/exploits/5124 · Exploit
• http://sourceforge.net/forum/forum.php?forum_id=785794 · Nota
• http://secunia.com/advisories/28972 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-0818 · Nota de Segurança
• http://securityfocus.com/bid/27806 · Nota
• http://vupen.com/english/advisories/2008/0589 · Nota