PT-2010-5475 · Dynpg · Dynpg Cms

Publicado 2010-12-04 · Atualizado 2021-03-25 · CVE-2010-4399

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions DynPG CMS versions 4.1.1 through 4.2.0

Description The issue allows remote attackers to read arbitrary files due to a directory traversal vulnerability in the languages.inc.php file when magic quotes gpc is disabled. This can be exploited by sending a .. (dot dot) in the CHG DYNPG SET LANGUAGE parameter to "index.php".

Recommendations For DynPG CMS versions 4.1.1 through 4.2.0, consider disabling the CHG DYNPG SET LANGUAGE parameter in the "index.php" file until a patch is available, or enable magic quotes gpc to prevent the directory traversal vulnerability.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2010-4399

Produtos afetados

Dynpg Cms

Referências · 9

• 🔥 http://securityfocus.com/bid/45115 · Exploit
• 🔥 http://htbridge.ch/advisory/lfi_in_dynpg.html · Exploit
• 🔥 https://exploit-db.com/exploits/15646 · Exploit
• 🔥 http://exploit-db.com/exploits/15646 · Exploit
• 🔥 http://packetstormsecurity.org/files/view/96230/dynpg-lfisqldisclose.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-4399 · Nota de Segurança
• http://secunia.com/advisories/42380 · Aviso do Fabricante
• http://dynpg.org/cms-freeware_en.php?t=DynPG+Update+4.2.1+Security+Update&read_article=226 · Correção
• http://osvdb.org/69539 · Nota