PT-2009-3788 · Blogplus · Blognplus

Ahmadbady · Publicado 2009-04-06 · Atualizado 2017-09-29 · CVE-2009-1246

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Blogplus version 1.0

Description The issue allows remote attackers to include and execute arbitrary local files via directory traversal vulnerabilities. This can be achieved by manipulating specific parameters in various PHP files, including row mysql blocks center down[file] in "includes/block center down.php", row mysql blocks center top[file] in "includes/block center top.php", row mysql blocks left[file] in "includes/block left.php", row mysql blocks right[file] in "includes/block right.php", and row mysql bloginfo[theme] in "includes/window down.php" and "includes/window top.php".

Recommendations For Blogplus version 1.0, consider restricting access to the vulnerable parameters row mysql blocks center down[file], row mysql blocks center top[file], row mysql blocks left[file], row mysql blocks right[file], and row mysql bloginfo[theme] to minimize the risk of exploitation. Additionally, avoid using the .. (dot dot) notation in these parameters until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2009-1246

Produtos afetados

Blognplus

Referências · 4

• 🔥 http://securityfocus.com/bid/34261 · Exploit
• 🔥 https://exploit-db.com/exploits/8290 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-1246 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49446 · Nota