PT-2008-6397 · Tnt · Ttforum

Cwh Underground · Publicado 2008-11-28 · Atualizado 2017-09-29 · CVE-2008-5265

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions TNT Forum version 0.9.4

Description A directory traversal issue exists in index.php, allowing remote attackers to include and execute arbitrary local files when magic quotes gpc is disabled. This is achieved through directory traversal sequences in the modulo parameter.

Recommendations For TNT Forum version 0.9.4, consider disabling the execution of arbitrary local files or restricting access to the modulo parameter in the index.php file until a patch is available. Additionally, enabling magic quotes gpc can help mitigate this issue.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2008-5265

Produtos afetados

Ttforum

Referências · 6

• 🔥 https://exploit-db.com/exploits/5782 · Exploit
• 🔥 http://securityfocus.com/bid/29645 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42978 · Nota
• http://securityreason.com/securityalert/4656 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-5265 · Nota de Segurança
• http://secunia.com/advisories/30595 · Aviso do Fabricante