PT-2010-2776 · Osdate · Osdate

Publicado 2010-03-23 · Atualizado 2017-08-17 · CVE-2010-1055

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Média

Vetor base

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions osDate versions 2.1.9 through 2.1.9 osDate versions 2.5.4 through 2.5.4

Description The issue allows remote attackers to execute arbitrary PHP code when magic quotes gpc is disabled and register globals is enabled. This can be achieved via a URL in the config[forum installed] parameter to API endpoints such as "forum/adminLogin.php" and "forum/userLogin.php".

Recommendations For osDate version 2.1.9, consider disabling the config[forum installed] parameter or restricting access to the "forum/adminLogin.php" and "forum/userLogin.php" API endpoints until a patch is available. For osDate version 2.5.4, consider disabling the config[forum installed] parameter or restricting access to the "forum/adminLogin.php" and "forum/userLogin.php" API endpoints until a patch is available.

Exploit

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2010-1055

Produtos afetados

Osdate

Referências · 9

• 🔥 http://securityfocus.com/bid/38738 · Exploit
• 🔥 https://exploit-db.com/exploits/11755 · Exploit
• 🔥 http://exploit-db.com/exploits/11755 · Exploit
• 🔥 http://evilc0de.blogspot.com/2010/03/osdate-rfi-vuln.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-1055 · Nota de Segurança
• http://osvdb.org/63006 · Nota
• http://osvdb.org/63005 · Nota
• http://secunia.com/advisories/38943 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/56909 · Nota