PT-2008-3690 · Smblog · Smartblog

Publicado 2008-05-13 · Atualizado 2017-08-08 · CVE-2008-2185

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions SMartBlog (aka SMBlog) version 1.3

Description A directory traversal issue exists, allowing remote attackers to include arbitrary local files. This is achieved by using directory traversal sequences in the page parameter of the index.php file.

Recommendations For SMartBlog (aka SMBlog) version 1.3, consider restricting access to the index.php file until a patch is available, or apply configuration changes to prevent directory traversal attacks, such as validating and sanitizing the page parameter.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2008-2185

Produtos afetados

Smartblog

Referências · 5

• 🔥 https://exploit-db.com/exploits/5535 · Exploit
• http://secunia.com/advisories/30057 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-2185 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42192 · Nota
• http://securityfocus.com/bid/29043 · Nota