PT-2009-2676 · Nonecms · Nonecms

Publicado 2009-09-11 · Atualizado 2018-10-11 · CVE-2008-7209

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions OneCMS versions 2.4 and earlier

Description The issue allows remote attackers to execute arbitrary code by uploading a file with an executable extension and using a safe content type, then accessing it via a direct request to the file. This is possible due to an unrestricted file upload vulnerability in the add2 action in a upload.php.

Recommendations For OneCMS versions 2.4 and earlier, restrict file uploads to only allow safe file types and ensure proper validation of uploaded files to prevent executable code from being uploaded. As a temporary workaround, consider restricting access to the a upload.php file until a proper fix is applied.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2008-7209

Produtos afetados

Nonecms

Referências · 10

• 🔥 http://bugreport.ir/index_26.htm · Exploit
• 🔥 https://exploit-db.com/exploits/4857 · Exploit
• 🔥 http://securityfocus.com/bid/27158 · Exploit
• http://osvdb.org/51117 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39485 · Nota
• http://vupen.com/english/advisories/2008/0081 · Aviso do Fabricante
• http://sourceforge.net/forum/forum.php?forum_id=774946 · Nota
• http://securityfocus.com/archive/1/485837/100/200/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-7209 · Nota de Segurança
• http://securityfocus.com/archive/1/487136/100/200/threaded · Nota