PT-2009-5625 · Joomla · Joomla! Com Album

Dreamturk · Publicado 2009-09-23 · Atualizado 2017-09-19 · CVE-2009-3318

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Joomla! com album component version 1.14

Description A directory traversal issue allows remote attackers to access arbitrary directories and potentially have other unspecified impacts by using a .. (dot dot) in the target parameter to "index.php".

Recommendations For version 1.14, update to a newer version that contains a fix for this issue. As a temporary workaround, consider restricting access to the "index.php" endpoint to minimize the risk of exploitation. Avoid using the target parameter in the affected endpoint until the issue is resolved.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2009-3318

Produtos afetados

Joomla! Com Album

Referências · 4

• 🔥 https://exploit-db.com/exploits/9706 · Exploit
• 🔥 http://exploit-db.com/exploits/9706 · Exploit
• 🔥 http://securityfocus.com/bid/36441 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-3318 · Nota de Segurança