PT-2008-3759 · Cms Made Simple · Cms Made Simple

Egix · Publicado 2008-05-16 · Atualizado 2017-09-29 · CVE-2008-2267

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: CMS Made Simple versions 1.2.4 and earlier

Description: The issue allows remote attackers to execute arbitrary code by uploading a file with a name ending in certain extensions, such as .jsp, .php3, .cgi, .dhtml, .phtml, .php5, or .jar, and then accessing it via a direct request to the file in modules/FileManager/postlet/.

Recommendations: For CMS Made Simple versions 1.2.4 and earlier, update to a version later than 1.2.4 to resolve the issue. As a temporary workaround, consider restricting access to the javaUpload.php file in the FileManager module to minimize the risk of exploitation. Avoid using the vulnerable file extensions in the affected module until the issue is resolved.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2008-2267

Produtos afetados

Cms Made Simple

Referências · 8

• 🔥 http://securityfocus.com/bid/29170 · Exploit
• 🔥 https://exploit-db.com/exploits/5600 · Exploit
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2267 · Nota
• http://secunia.com/advisories/30208 · Aviso do Fabricante
• http://blog.cmsmadesimple.org/2008/05/12/announcing-cms-made-simple-125 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42371 · Nota
• http://attrition.org/pipermail/vim/2008-May/001978.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-2267 · Nota de Segurança