PT-2017-18924 · Bigtree · Bigtree Cms

Xfkxfk · Publicado 2017-06-05 · Atualizado 2024-08-05 · CVE-2017-9442

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions BigTree CMS versions 4.2.18 and earlier

Description The issue allows remote authenticated users to execute arbitrary code by uploading a crafted package containing a PHP web shell. This is related to the extraction of a ZIP archive to filename patterns such as cache/package/xxx/yyy.php. The problem exists in files coreadminmodulesdeveloperextensionsinstallunpack.php and coreadminmodulesdeveloperpackagesinstallunpack.php. The vendor notes that any installed package or extension must be implicitly trusted as they have the ability to write PHP files.

Recommendations For BigTree CMS versions 4.2.18 and earlier, consider disabling the package installation feature until a patch is available to prevent the upload of crafted packages. Restrict access to the unpack.php files in the coreadminmodulesdeveloperextensionsinstall and coreadminmodulesdeveloperpackagesinstall directories to minimize the risk of exploitation. Avoid using the package installation feature with untrusted packages, as they may contain PHP web shells. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2017-9442

Produtos afetados

Bigtree Cms

Referências · 5

• 🔥 https://github.com/bigtreecms/BigTree-CMS/issues/291 · Exploit
• https://t.me/cvenotify/89250 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2017-9442 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9442 · Nota
• https://osv.dev/vulnerability/CVE-2017-9442 · Aviso do Fabricante