PT-2009-6610 · Oscailt · Oscailt

Publicado 2009-12-31 · Atualizado 2017-08-17 · CVE-2009-4512

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Média

Vetor base

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Oscailt version 3.3

Description The issue allows remote attackers to include and execute arbitrary local files. This is achieved by exploiting a directory traversal vulnerability in the index.php file when 'Use Friendly URL's' is disabled. The vulnerability can be triggered by including a .. (dot dot) in the obj id parameter.

Recommendations For Oscailt version 3.3, consider disabling the 'Use Friendly URL's' option as a temporary workaround, or restrict access to the index.php file to minimize the risk of exploitation. Avoid using the obj id parameter in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2009-4512

Produtos afetados

Oscailt

Referências · 7

• 🔥 http://packetstormsecurity.org/0910-exploits/oscailt33-lfi.txt · Exploit
• 🔥 http://securityreason.com/exploitalert/7422 · Exploit
• 🔥 https://exploit-db.com/exploits/9922 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54023 · Nota
• http://secunia.com/advisories/37180 · Aviso do Fabricante
• http://vupen.com/english/advisories/2009/3096 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-4512 · Nota de Segurança