PT-2010-5577 · Html Edit · Html-Edit Cms

Publicado 2010-12-29 · Atualizado 2017-08-17 · CVE-2010-4611

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Html-edit CMS version 3.1.8

Description The issue allows remote attackers to obtain sensitive information via direct requests to specific files, including pages.php and menu.php in includes/core files, and extensions/login/frontend/pages/antihacker.php. These requests can reveal the installation path in an error message.

Recommendations For Html-edit CMS version 3.1.8, consider restricting access to the files pages.php, menu.php, and antihacker.php to minimize the risk of exploitation. Avoid using these files until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2010-4611

Produtos afetados

Html-Edit Cms

Referências · 5

• 🔥 http://exploit-db.com/exploits/15800 · Exploit
• 🔥 https://exploit-db.com/exploits/15800 · Exploit
• 🔥 http://htbridge.ch/advisory/path_disclosure_in_html_edit_cms.html · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64437 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-4611 · Nota de Segurança