PT-2010-3350 · Siestta · Siestta

Publicado 2010-05-04 · Atualizado 2017-08-17 · CVE-2010-1710

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Siestta version 2.0

Description A directory traversal issue exists in the login.php file of Siestta, allowing remote attackers to include and execute arbitrary local files. This is possible when the register globals setting is enabled. The issue can be exploited by using a .. (dot dot) in the idioma parameter of the vulnerable endpoint.

Recommendations For Siestta version 2.0, consider disabling the register globals setting to prevent exploitation. As a temporary workaround, restrict access to the login.php file until a patch is available. Avoid using the idioma parameter in the affected endpoint until the issue is resolved.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2010-1710

Produtos afetados

Siestta

Referências · 8

• 🔥 https://exploit-db.com/exploits/12260 · Exploit
• 🔥 http://securityfocus.com/bid/39526 · Exploit
• 🔥 http://packetstormsecurity.org/1004-exploits/siestta-lfixss.txt · Exploit
• 🔥 http://exploit-db.com/exploits/12260 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-1710 · Nota de Segurança
• http://secunia.com/advisories/39453 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/57900 · Nota
• http://osvdb.org/63837 · Nota