PT-2008-5978 · Php Nuke · Php-Nuke

Publicado 2008-10-28 · Atualizado 2019-07-01 · CVE-2008-4767

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions PHP-Nuke (affected versions not specified)

Description The issue allows remote attackers to potentially execute arbitrary code by uploading files with certain extensions, including .htm, .html, or .txt, and then accessing them directly. However, it is unclear how the upload of .html or .txt files could lead to arbitrary code execution, as this might be a legitimate functionality.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2008-4767

Produtos afetados

Php-Nuke

Referências · 5

• 🔥 https://exploit-db.com/exploits/31702 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-4767 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42007 · Nota
• http://securityfocus.com/bid/28919 · Nota
• http://juniper.net/security/auto/vulnerabilities/vuln28919.html · Nota