PT-2009-2351 · Joomla · Joomla Live Chat

Jdc · Publicado 2009-07-30 · Atualizado 2017-09-29 · CVE-2008-6882

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Joomla Live Chat (com livechat) component version 1.0

Description: The issue allows remote attackers to utilize the xmlhttp.php script as an open HTTP proxy. This can be exploited to hide network scanning activities or to scan internal networks by sending a GET request with a full URL in the query string.

Recommendations: For version 1.0, consider disabling the xmlhttp.php script until a patch is available to prevent its use as an open HTTP proxy. Restrict access to this script to minimize the risk of exploitation.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2008-6882

Produtos afetados

Joomla Live Chat

Referências · 4

• 🔥 https://exploit-db.com/exploits/7441 · Exploit
• 🔥 http://securityfocus.com/bid/32803 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-6882 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47305 · Nota