PT-2008-6216 · Unknown · Mini Web Calendar

Ahmadbady · Publicado 2008-11-13 · Atualizado 2017-09-29 · CVE-2008-5062

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mini Web Calendar (mwcal) version 1.2

Description The issue allows remote attackers to read arbitrary files due to a directory traversal vulnerability in the php/cal pdf.php file. This is achieved by using directory traversal sequences in the thefile parameter.

Recommendations For Mini Web Calendar (mwcal) version 1.2, avoid using the thefile parameter in the php/cal pdf.php file until a fix is available. As a temporary workaround, consider restricting access to the php/cal pdf.php file to minimize the risk of exploitation.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2008-5062

Produtos afetados

Mini Web Calendar

Referências · 8

• 🔥 https://exploit-db.com/exploits/7049 · Exploit
• 🔥 http://securityfocus.com/bid/32196 · Exploit
• http://osvdb.org/49680 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-5062 · Nota de Segurança
• http://secunia.com/advisories/32640 · Aviso do Fabricante
• http://securityreason.com/securityalert/4590 · Nota
• http://vupen.com/english/advisories/2008/3077 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46455 · Nota