PT-2012-2992 · Impresscms · Impresscms

Publicado 2012-10-06 · Atualizado 2017-12-01 · CVE-2012-0987

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Média

Vetor base

AV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ImpressCMS versions 1.2.x through 1.2.6 and versions 1.3.x through 1.3.0

Description The issue allows remote authenticated users to include and execute arbitrary local files. This is achieved by exploiting a directory traversal vulnerability in the edituser.php file, specifically by using a .. (dot dot) in the icmsConfigPlugins[sanitizer plugins][] parameter.

Recommendations For ImpressCMS versions 1.2.x through 1.2.6, update to version 1.2.7 Final or later. For ImpressCMS versions 1.3.x through 1.3.0, update to version 1.3.1 Final or later.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2012-0987

Produtos afetados

Impresscms

Referências · 9

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2012-01/0022.html · Exploit
• 🔥 http://osvdb.org/78143 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/72146 · Nota
• http://securityfocus.com/bid/51268 · Nota
• http://community.impresscms.org/modules/smartsection/item.php?itemid=579 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2012-0987 · Nota de Segurança
• http://secunia.com/advisories/47448 · Aviso do Fabricante
• https://htbridge.com/advisory/HTB23064 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0987 · Nota