PT-2009-1658 · Php · My Php Indexer

Publicado 2009-02-19 · Atualizado 2017-09-29 · CVE-2008-6183

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions My PHP Indexer version 1.0

Description The issue allows remote attackers to read arbitrary files due to multiple directory traversal vulnerabilities in the index.php file. This is achieved by using a .. (dot dot) in the d and f parameters.

Recommendations For My PHP Indexer version 1.0, consider restricting access to the index.php file until a patch is available, and avoid using the d and f parameters in a way that could facilitate directory traversal attacks.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2008-6183

Produtos afetados

My Php Indexer

Referências · 7

• 🔥 http://securityfocus.com/bid/31726 · Exploit
• 🔥 https://exploit-db.com/exploits/6740 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45830 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-6183 · Nota
• http://secunia.com/advisories/32215 · Aviso do Fabricante
• http://vupen.com/english/advisories/2008/2796 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-6183 · Nota de Segurança