PT-2008-2996 · Mts · Multiple Time Sheets

Joss · Publicado 2008-03-20 · Atualizado 2018-10-11 · CVE-2008-1415

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Multiple Time Sheets (MTS) versions 5.0 and earlier

Description A directory traversal issue exists, allowing remote attackers to read arbitrary files. This is achieved by using "../..//" sequences in the tab parameter of the index.php file.

Recommendations For versions 5.0 and earlier, consider restricting access to the index.php file until a fix is available, or apply configuration changes to prevent directory traversal attacks, such as validating and sanitizing user input for the tab parameter.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2008-1415

Produtos afetados

Multiple Time Sheets

Referências · 6

• 🔥 https://exploit-db.com/exploits/5262 · Exploit
• 🔥 http://securityfocus.com/bid/28263 · Exploit
• http://securityreason.com/securityalert/3756 · Nota
• http://vupen.com/english/advisories/2008/0911/references · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-1415 · Nota de Segurança
• http://securityfocus.com/archive/1/489689/100/0/threaded · Nota