PT-2009-2129 · Simple Machines · Simple Machines Forum

~Elmysterio · Publicado 2009-04-07 · Atualizado 2017-09-29 · CVE-2008-6659

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Simple Machines Forum (SMF) versions 1.0 through 1.0.14 Simple Machines Forum (SMF) versions 1.1 through 1.1.6

Description The issue allows remote authenticated users to configure arbitrary local files for execution via directory traversal sequences in the value of the theme dir field during a jsoption action. This is related to Sources/QueryString.php and Sources/Themes.php. For example, a local .gif file in attachments/ with PHP code that was uploaded through a profile2 action to index.php can be executed.

Recommendations For Simple Machines Forum (SMF) versions 1.0 through 1.0.14, update to version 1.0.15 or later. For Simple Machines Forum (SMF) versions 1.1 through 1.1.6, update to version 1.1.7 or later.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2008-6659

Produtos afetados

Simple Machines Forum

Referências · 6

• 🔥 https://exploit-db.com/exploits/7011 · Exploit
• 🔥 http://securityfocus.com/bid/32139 · Exploit
• http://simplemachines.org/community/index.php?topic=272861.0 · Aviso do Fabricante
• http://secunia.com/advisories/32516 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-6659 · Nota de Segurança
• http://osvdb.org/50072 · Nota