PT-2015-5363 · U5Cms · U5Cms

Gjoko Krstic · Publicado 2015-02-11 · Atualizado 2015-02-12 · CVE-2015-1576

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions u5CMS versions prior to 3.9.4

Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via several API endpoints, including "copy2.php", "localize.php", "metai.php", "nc.php", "new2.php", and "rename2.php" in the "u5admin/" directory, by manipulating the name parameter. Additionally, the "c" parameter in "u5admin/editor.php", the typ parameter in "u5admin/meta2.php", and the newname parameter in "u5admin/rename2.php" are also vulnerable.

Recommendations For versions prior to 3.9.4, update to version 3.9.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable API endpoints and parameters, such as name, c, typ, and newname, until a patch is applied.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2015-1576

Produtos afetados

U5Cms

Referências · 4

• 🔥 http://packetstormsecurity.com/files/130326/u5CMS-3.9.3-SQL-Injection.html · Exploit
• 🔥 http://zeroscience.mk/en/vulnerabilities/ZSL-2015-5225.php · Exploit
• 🔥 https://exploit-db.com/exploits/36027 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-1576 · Nota de Segurança