PT-2009-3769 · Unknown · Podcast Generator

Blackhawk · Publicado 2009-04-02 · Atualizado 2017-09-29 · CVE-2009-1226

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Podcast Generator versions 1.1 and earlier

Description The issue allows remote attackers to delete arbitrary files due to improper access restriction to administrative functions. This can be achieved via the file parameter.

Recommendations For Podcast Generator versions 1.1 and earlier, restrict access to the core/admin/delete.php file to prevent unauthorized deletion of files. As a temporary workaround, consider disabling the delete functionality in the administrative interface until a proper fix is applied.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2009-1226

Produtos afetados

Podcast Generator

Referências · 4

• 🔥 http://securityfocus.com/bid/34317 · Exploit
• 🔥 https://exploit-db.com/exploits/8324 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-1226 · Nota de Segurança
• http://secunia.com/advisories/34555 · Aviso do Fabricante