PT-2008-3320 · Advanced Software Engineering Limited · Chartdirector

Stack-Terrorist · Publicado 2008-04-15 · Atualizado 2017-09-29 · CVE-2008-1782

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions ChartDirector version 4.1

Description The issue allows remote attackers to read sensitive files. This is achieved via the file parameter in the phpdemo/viewsource.php file.

Recommendations For ChartDirector version 4.1, restrict access to the phpdemo/viewsource.php file to minimize the risk of exploitation. As a temporary workaround, consider disabling the use of the file parameter in this file until a patch is available.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2008-1782

Produtos afetados

Chartdirector

Referências · 5

• 🔥 http://securityfocus.com/bid/28674 · Exploit
• 🔥 https://exploit-db.com/exploits/5399 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-1782 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41701 · Nota
• http://vupen.com/english/advisories/2008/1140/references · Nota