PT-2009-6042 · Runcms · Runcms

Publicado 2009-10-27 · Atualizado 2009-10-28 · CVE-2009-3815

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions RunCMS version 2M1

Description The issue allows remote attackers to obtain sensitive information when certain error reporting levels are used. This is achieved via the op[] parameter to "modules/contact/index.php" or the uid[] parameter to "userinfo.php". The installation path is leaked in an error message when these parameters are used in a call to the preg match() function.

Recommendations For RunCMS version 2M1, consider disabling the error reporting feature or adjusting its levels to prevent sensitive information disclosure until a patch is available. Restrict access to the "modules/contact/index.php" and "userinfo.php" scripts to minimize the risk of exploitation. Avoid using the op[] and uid[] parameters in the affected API endpoints until the issue is resolved.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2009-3815

Produtos afetados

Runcms

Referências · 3

• 🔥 http://retrogod.altervista.org/9sg_runcms_forum_sql.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-3815 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3815 · Nota