PT-2009-2135 · Ananta · Ananta Cms

Cwh Underground · Publicado 2009-04-08 · Atualizado 2017-09-29 · CVE-2008-6665

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Ananta CMS version 1.0b5

Description The issue allows remote attackers to gain administrator privileges via a crafted email parameter, possibly related to code injection, when magic quotes gpc is disabled.

Recommendations For Ananta CMS version 1.0b5, consider disabling the change.php script or restricting access to it until a patch is available, and ensure magic quotes gpc is enabled to minimize the risk of exploitation.

Exploit

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2008-6665

Produtos afetados

Ananta Cms

Referências · 4

• 🔥 http://securityfocus.com/bid/29752 · Exploit
• 🔥 https://exploit-db.com/exploits/5824 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-6665 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43119 · Nota