PT-2008-6654 · Mini Cms · Mini Cms

Condemned · Publicado 2008-12-16 · Atualizado 2017-09-29 · CVE-2008-5593

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Mini CMS version 1.0.1

Description The issue concerns directory traversal vulnerabilities in the index.php file of Mini CMS. These vulnerabilities allow remote attackers to include and execute arbitrary local files by utilizing a .. (dot dot) in the page and admin parameters.

Recommendations For Mini CMS version 1.0.1, consider restricting access to the page and admin parameters in the index.php file to minimize the risk of exploitation. As a temporary workaround, avoid using the page and admin parameters with untrusted input until a patch is available.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2008-5593

Produtos afetados

Mini Cms

Referências · 5

• 🔥 https://exploit-db.com/exploits/7375 · Exploit
• http://securityfocus.com/bid/32680 · Nota
• http://securityreason.com/securityalert/4750 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-5593 · Nota de Segurança
• http://secunia.com/advisories/33024 · Aviso do Fabricante