PT-2009-1676 · Kwsphp · Kwsphp

Ajax + 1 · Publicado 2009-02-20 · Atualizado 2017-10-19 · CVE-2008-6201

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions KwsPHP version 1.3.456

Description A directory traversal issue in the eskuel module's help.php file allows remote attackers to execute arbitrary commands by manipulating the action parameter.

Recommendations For version 1.3.456, consider restricting access to the action parameter in the help.php file of the eskuel module to prevent command execution until a fix is available.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2008-6201

Produtos afetados

Kwsphp

Referências · 8

• 🔥 https://exploit-db.com/exploits/5449 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-6201 · Nota de Segurança
• http://secunia.com/advisories/29802 · Aviso do Fabricante
• http://vupen.com/english/advisories/2008/1241/references · Nota
• http://securityfocus.com/bid/28788 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41950 · Nota
• http://koogar.alorys-hebergement.com/kwsphp/index.php?mod=news&ac=commentaires&id=49 · Nota
• http://securityfocus.com/archive/1/490861 · Nota