PT-2012-1491 · Cmscout+1 · Cmscout+1

Publicado 2012-11-26 · Atualizado 2017-08-29 · CVE-2010-5281

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions CMScout 2.09 IBrowser TinyMCE Plugin version 1.4.1

Description The issue allows remote attackers to read arbitrary files via a .. (dot dot) in the lang parameter when magic quotes gpc is disabled.

Recommendations For CMScout 2.09 IBrowser TinyMCE Plugin version 1.4.1, consider disabling the lang parameter in the ibrowser.php file until a patch is available. Restrict access to sensitive files to minimize the risk of exploitation. Enable magic quotes gpc to prevent this issue.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2010-5281

Produtos afetados

Cmscout

Tinymce

Referências · 7

• 🔥 http://osvdb.org/68247 · Exploit
• 🔥 https://exploit-db.com/exploits/17850 · Exploit
• http://secunia.com/advisories/41634 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/62066 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-5281 · Nota de Segurança
• http://johnleitch.net/Vulnerabilities/CMScout.2.09.IBrowser.TinyMCE.Plugin.Local.File.Inclusion/33 · Nota
• http://packetstormsecurity.org/1009-exploits/cmscout209-lfi.txt · Nota