PT-2008-2990 · Exero · Exero Cms

Gold_M · Publicado 2008-03-20 · Atualizado 2017-09-29 · CVE-2008-1409

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Exero CMS version 1.0.1

Description The issue concerns directory traversal vulnerabilities in the Default theme of Exero CMS. These vulnerabilities allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the theme parameter to various PHP files, including "index.php", "editpassword.php", "avatar.php", "custompage.php", "errors/404.php", "memberslist.php", "profile.php", "fullview.php", and "nopermission.php". The affected endpoints include "/usercp/", "/members/", "/news/", and others.

Recommendations For Exero CMS version 1.0.1, consider restricting access to the vulnerable PHP files until a patch is available. As a temporary workaround, avoid using the theme parameter in the affected API endpoints. Restrict access to the Default theme to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2008-1409

Produtos afetados

Exero Cms

Referências · 5

• 🔥 https://exploit-db.com/exploits/5265 · Exploit
• http://securityfocus.com/bid/28273 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-1409 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41238 · Nota
• http://vupen.com/english/advisories/2008/0909/references · Nota