PT-2009-3030 · Sitexs · Sitex Cms

Darkjoker · Publicado 2009-01-30 · Atualizado 2017-09-29 · CVE-2009-0371

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SiteXS CMS versions 0.1.1 and earlier

Description The issue allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the type parameter in the "post.php" file.

Recommendations For SiteXS CMS versions 0.1.1 and earlier, avoid using the type parameter in the post.php file until the issue is resolved.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2009-0371

Produtos afetados

Sitex Cms

Referências · 5

• 🔥 https://exploit-db.com/exploits/7879 · Exploit
• 🔥 http://securityfocus.com/bid/33457 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/48236 · Nota
• http://vupen.com/english/advisories/2009/0247 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-0371 · Nota de Segurança