PT-2010-2973 · Justvisual · Justvisual Cms

Eidelweiss · Publicado 2010-04-06 · Atualizado 2017-08-17 · CVE-2010-1268

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions justVisual CMS version 2.0

Description A directory traversal issue exists in index.php, allowing remote attackers to include and execute arbitrary local files when magic quotes gpc is disabled. This is achieved by using directory traversal sequences in the p parameter.

Recommendations For justVisual CMS version 2.0, consider disabling the use of the p parameter in index.php or enabling magic quotes gpc to minimize the risk of exploitation. Additionally, restrict access to sensitive files and directories to prevent unauthorized inclusion and execution.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2010-1268

Produtos afetados

Justvisual Cms

Referências · 8

• 🔥 http://exploit-db.com/exploits/11876 · Exploit
• 🔥 http://packetstormsecurity.org/1003-exploits/justvisual-lfi.txt · Exploit
• 🔥 http://securityfocus.com/bid/38970 · Exploit
• 🔥 https://exploit-db.com/exploits/11876 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/57174 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-1268 · Nota de Segurança
• http://secunia.com/advisories/39093 · Aviso do Fabricante
• http://osvdb.org/63156 · Nota