PT-2008-3513 · Acidcat · Acidcat Cms

Publicado 2008-04-27 · Atualizado 2018-10-11 · CVE-2008-1992

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Acidcat CMS version 3.4.1

Description The issue allows remote attackers to bypass access restrictions to certain files, specifically default mail aspemail.asp, default mail cdosys.asp, and default mail jmail.asp, enabling them to relay email messages with modified From, FromName, and To fields.

Recommendations For Acidcat CMS version 3.4.1, restrict access to the vulnerable files default mail aspemail.asp, default mail cdosys.asp, and default mail jmail.asp to prevent email relay attacks.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2008-1992

Produtos afetados

Acidcat Cms

Referências · 9

• 🔥 https://exploit-db.com/exploits/5478 · Exploit
• 🔥 http://bugreport.ir/index.php?/36 · Exploit
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1992 · Nota
• http://securityfocus.com/bid/28868 · Nota
• http://securityfocus.com/archive/1/491129/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-1992 · Nota de Segurança
• http://securityreason.com/securityalert/3842 · Nota
• http://secunia.com/advisories/29916 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41921 · Nota