PT-2015-6767 · X2Engine · X2Crm

Simone Quatrini · Publicado 2015-09-29 · Atualizado 2018-10-09 · CVE-2015-5074

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions X2Engine X2CRM versions prior to 5.0.9

Description The issue is related to an incomplete blacklist vulnerability in the FileUploadsFilter class. This allows remote authenticated users to execute arbitrary PHP code by uploading a file with a .pht extension.

Recommendations For versions prior to 5.0.9, update to version 5.0.9 or later to resolve the issue. As a temporary workaround, consider restricting file uploads to prevent the execution of arbitrary PHP code.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2015-5074

Produtos afetados

X2Crm

Referências · 7

• 🔥 https://github.com/X2Engine/X2CRM/commit/10b72bfe7a1b9694f19a0adef72d85a754d4d3f8#diff-26a90fcab2707d6ef509fccb3588790f · Exploit
• 🔥 https://portcullis-security.com/security-research-and-downloads/security-advisories/cve-2015-5074 · Exploit
• 🔥 https://exploit-db.com/exploits/38323 · Exploit
• http://packetstormsecurity.com/files/133717/X2Engine-4.2-Arbitrary-File-Upload.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-5074 · Nota de Segurança
• http://securityfocus.com/archive/1/536546/100/0/threaded · Nota
• http://seclists.org/fulldisclosure/2015/Sep/92 · Nota