PT-2009-1952 · Joomla · Flash Tree Gallery

Noge · Publicado 2009-03-18 · Atualizado 2017-09-29 · CVE-2008-6482

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Flash Tree Gallery (com treeg) component version 1.0 for Joomla!

Description The issue allows remote attackers to execute arbitrary PHP code via the mosConfig live site parameter in the admin.treeg.php file when register globals is enabled.

Recommendations For Flash Tree Gallery (com treeg) component version 1.0, consider disabling the register globals setting to prevent exploitation. Additionally, restrict access to the admin.treeg.php file until a fix is available. Avoid using the mosConfig live site parameter in the affected component until the issue is resolved.

Exploit

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2008-6482

Produtos afetados

Flash Tree Gallery

Referências · 6

• 🔥 http://securityfocus.com/bid/32041 · Exploit
• 🔥 http://osvdb.org/49499 · Exploit
• 🔥 https://exploit-db.com/exploits/6928 · Exploit
• http://secunia.com/advisories/32520 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-6482 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46260 · Nota