PT-2008-3388 · Make Our Life Easy · Make Our Life Easy

Gold_M · Publicado 2008-04-16 · Atualizado 2017-09-29 · CVE-2008-1857

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Make our Life Easy (Mole) version 2.1.0

Description The issue allows remote attackers to read arbitrary files via directory traversal sequences in the dirn and fname parameters in the viewsource.php file.

Recommendations For Make our Life Easy (Mole) version 2.1.0, consider restricting access to the viewsource.php file until a patch is available, and avoid using the dirn and fname parameters in this file to minimize the risk of exploitation.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2008-1857

Produtos afetados

Make Our Life Easy

Referências · 6

• 🔥 https://exploit-db.com/exploits/5394 · Exploit
• 🔥 http://securityfocus.com/bid/28659 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-1857 · Nota de Segurança
• http://vupen.com/english/advisories/2008/1141/references · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41681 · Nota
• http://secunia.com/advisories/29685 · Aviso do Fabricante