PT-2011-2417 · Lotus · Lotuscms Fraise

Mr_Me · Publicado 2011-01-20 · Atualizado 2017-08-17 · CVE-2011-0518

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Média

Vetor base

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions LotusCMS Fraise version 3.0

Description A directory traversal issue exists in the core/lib/router.php file of LotusCMS Fraise. This issue allows remote attackers to include and execute arbitrary local files when the magic quotes gpc setting is disabled. The vulnerability can be exploited via the system parameter to the "index.php" endpoint.

Recommendations For LotusCMS Fraise version 3.0, consider disabling the magic quotes gpc setting or restricting access to the system parameter in the "index.php" endpoint until a patch is available. As a temporary workaround, restrict the execution of arbitrary local files to minimize the risk of exploitation.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2011-0518

Produtos afetados

Lotuscms Fraise

Referências · 9

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/lcms_php_exec.rb · Exploit
• 🔥 https://exploit-db.com/exploits/15964 · Exploit
• 🔥 http://exploit-db.com/exploits/15964 · Exploit
• http://vupen.com/english/advisories/2011/0073 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0518 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-0518 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64736 · Nota
• http://osvdb.org/70409 · Nota
• http://secunia.com/advisories/42835 · Aviso do Fabricante