PT-2008-6535 · Punbb · Punbb Punportal

Athos + 1 · Publicado 2008-12-10 · Atualizado 2017-09-29 · CVE-2008-5418

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Média

Vetor base

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PunBB PunPortal module versions prior to 2.0

Description The issue allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the pun user[language] parameter in the login.php file.

Recommendations For PunBB PunPortal module versions prior to 2.0, update to version 2.0 or later to resolve the issue.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2008-5418

Produtos afetados

Punbb Punportal

Referências · 5

• 🔥 https://exploit-db.com/exploits/7168 · Exploit
• 🔥 http://securityfocus.com/bid/32380 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-5418 · Nota de Segurança
• http://securityreason.com/securityalert/4707 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46774 · Nota