PT-2009-6000 · Phpbms · Phpbms

Elwaux · Publicado 2009-10-22 · Atualizado 2017-09-19 · CVE-2009-3756

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions phpBMS version 0.96

Description The issue allows remote attackers to obtain sensitive information via direct requests to specific files, including footer.php, header.php, the show action in advancedsearch.php, and choicelist.php. These requests can reveal the installation path in an error message.

Recommendations For phpBMS version 0.96, consider restricting access to the files footer.php, header.php, advancedsearch.php, and choicelist.php to minimize the risk of exploitation. As a temporary workaround, limit the information disclosed in error messages to prevent revealing sensitive details about the installation path.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2009-3756

Produtos afetados

Phpbms

Referências · 4

• 🔥 https://exploit-db.com/exploits/9101 · Exploit
• 🔥 http://exploit-db.com/exploits/9101 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-3756 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51652 · Nota