PT-2009-5936 · Nullam · Nullam Blog

Drosophila + 1 · Publicado 2009-10-11 · Atualizado 2018-10-10 · CVE-2009-3664

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Nullam Blog version 0.1.2

Description The issue concerns multiple directory traversal vulnerabilities in the index.php file. These vulnerabilities allow remote attackers to include or execute arbitrary files by utilizing a .. (dot dot) in the p and s parameters.

Recommendations For Nullam Blog version 0.1.2, consider restricting access to the p and s parameters in the index.php file to prevent directory traversal attacks. As a temporary workaround, restrict the use of the p and s parameters until a patch is available.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2009-3664

Produtos afetados

Nullam Blog

Referências · 7

• 🔥 https://exploit-db.com/exploits/9625 · Exploit
• 🔥 http://exploit-db.com/exploits/9625 · Exploit
• 🔥 http://osvdb.org/57919 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-3664 · Nota de Segurança
• http://securityfocus.com/archive/1/506380/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/53217 · Nota
• http://secunia.com/advisories/36648 · Aviso do Fabricante