PT-2010-2778 · Phpkobo · Phpkobo Adfreely

Ahmadbady · Publicado 2010-03-23 · Atualizado 2017-08-17 · CVE-2010-1057

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Phpkobo AdFreely (aka Ad Board Script) version 1.01

Description The issue allows remote attackers to include and execute arbitrary local files via a ..// (dot dot slash slash) in the LANG CODE parameter to various files, including common.inc.php in multiple directories such as codelib/cfg/, codelib/sys/, staff/, staff/app/, and staff/file.php, when magic quotes gpc is disabled.

Recommendations For Phpkobo AdFreely (aka Ad Board Script) version 1.01, consider disabling the LANG CODE parameter in the affected files until a patch is available. Restrict access to the common.inc.php file in the mentioned directories to minimize the risk of exploitation. Additionally, enable magic quotes gpc to prevent this type of attack.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2010-1057

Produtos afetados

Phpkobo Adfreely

Referências · 9

• 🔥 http://securityfocus.com/bid/38731 · Exploit
• 🔥 http://exploit-db.com/exploits/11722 · Exploit
• 🔥 https://exploit-db.com/exploits/11722 · Exploit
• http://secunia.com/advisories/38947 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/56858 · Nota
• http://osvdb.org/62926 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/56865 · Nota
• http://vupen.com/english/advisories/2010/0611 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2010-1057 · Nota de Segurança