PT-2009-2660 · Phpkit · Phpkit

Publicado 2009-09-09 · Atualizado 2018-10-11 · CVE-2008-7193

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PHPKIT version 1.6.4 PL1

Description The issue allows remote attackers to conduct cross-site request forgery (CSRF) attacks. This is possible because the session ID is included in the URL, and the PHPKITSID parameter can be read from the HTTP Referer. Attackers can use this information to modify the user profile via the "upload files/include.php" endpoint or create a new administrator via the "upload files/pk/include.php" endpoint.

Recommendations For PHPKIT version 1.6.4 PL1, consider disabling the use of the PHPKITSID parameter in the HTTP Referer as a temporary workaround until a patch is available. Restrict access to the "upload files/include.php" and "upload files/pk/include.php" endpoints to minimize the risk of exploitation.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2008-7193

Produtos afetados

Phpkit

Referências · 5

• http://osvdb.org/50998 · Nota
• http://securityfocus.com/archive/1/487249/100/200/threaded · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-7193 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/40033 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-7193 · Nota de Segurança