PT-2008-3380 · Joomla · Joomlaxplorer

Houssamix · Publicado 2008-04-16 · Atualizado 2017-09-29 · CVE-2008-1849

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions joomlaXplorer (com joomlaxplorer) versions 1.6.2 and earlier

Description The issue allows remote attackers to list arbitrary directories via a .. (dot dot) in the dir parameter in a "show error" action. This is a directory traversal vulnerability in the index.php file of the joomlaXplorer component.

Recommendations For versions 1.6.2 and earlier, consider restricting access to the dir parameter in the "show error" action of the index.php file until a patch is available. As a temporary workaround, disabling the "show error" action or limiting directory access can help minimize the risk of exploitation.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2008-1849

Produtos afetados

Joomlaxplorer

Referências · 4

• 🔥 http://securityfocus.com/bid/28746 · Exploit
• 🔥 https://exploit-db.com/exploits/5431 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-1849 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41778 · Nota