PT-2009-6049 · Fiji Web Design · Fiji Web Design Ajax Chat

Publicado 2009-10-28 · Atualizado 2009-10-28 · CVE-2009-3822

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Fiji Web Design Ajax Chat (com ajaxchat) component version 1.0 for Joomla!

Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[mosConfig absolute path] parameter to the "tests/ajcuser.php" endpoint.

Recommendations For Fiji Web Design Ajax Chat (com ajaxchat) component version 1.0, consider restricting access to the tests/ajcuser.php endpoint until a patch is available. Avoid using the GLOBALS[mosConfig absolute path] parameter in the affected endpoint to minimize the risk of exploitation.

Exploit

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2009-3822

Produtos afetados

Fiji Web Design Ajax Chat

Referências · 6

• 🔥 http://packetstormsecurity.org/0910-exploits/joomlaajaxchat-rfi.txt · Exploit
• 🔥 https://exploit-db.com/exploits/9888 · Exploit
• 🔥 http://securityfocus.com/bid/36731 · Exploit
• http://secunia.com/advisories/37087 · Aviso do Fabricante
• http://vupen.com/english/advisories/2009/2968 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-3822 · Nota de Segurança