PT-2010-4952 · Netart Media · Netart Media Real Estate Portal

R0T · Publicado 2010-09-24 · Atualizado 2017-08-17 · CVE-2010-3606

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions NetArt MEDIA Real Estate Portal version 2.0

Description The issue concerns directory traversal vulnerabilities in the AGENTS/index.php file. Remote attackers can exploit this to include and execute arbitrary local files by using directory traversal sequences in the folder and action parameters.

Recommendations For NetArt MEDIA Real Estate Portal version 2.0, restrict access to the folder and action parameters in the AGENTS/index.php file to minimize the risk of exploitation. Avoid using directory traversal sequences in these parameters until the issue is resolved.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2010-3606

Produtos afetados

Netart Media Real Estate Portal

Referências · 7

• http://pridels-team.blogspot.com/2010/09/netartmedia-real-estate-portal-v20-xss.html · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3606 · Nota
• http://secunia.com/advisories/41377 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/61867 · Nota
• http://osvdb.org/68062 · Nota
• http://securityfocus.com/bid/43266 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-3606 · Nota de Segurança