PT-2009-6366 · Omilen+1 · Omilen Photo Gallery+1

Byalbayx · Publicado 2009-12-04 · Atualizado 2017-09-19 · CVE-2009-4202

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Omilen Photo Gallery (com omphotogallery) version Beta 0.5 for Joomla!

Description The issue allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the controller parameter to "index.php".

Recommendations For Omilen Photo Gallery (com omphotogallery) version Beta 0.5, consider restricting access to the "index.php" endpoint until a patch is available, and avoid using directory traversal sequences in the controller parameter to prevent exploitation.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2009-4202

Produtos afetados

Joomla!

Omilen Photo Gallery

Referências · 5

• 🔥 https://exploit-db.com/exploits/8870 · Exploit
• 🔥 http://exploit-db.com/exploits/8870 · Exploit
• 🔥 http://securityfocus.com/bid/35201 · Exploit
• http://vupen.com/english/advisories/2009/1494 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-4202 · Nota de Segurança