PT-2017-6686 · Phpmyadmin · Phpmybackuppro

Publicado 2017-07-21 · Atualizado 2017-07-25 · CVE-2015-3640

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Média

Vetor base

AV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions phpMyBackupPro versions 2.5 and earlier

Description The issue allows remote authenticated users to inject and execute arbitrary PHP scripts by exploiting the lack of proper escaping of the "." character in request parameters. This can be achieved by injecting scripts via the path, filename, and dirs parameters to the "scheduled.php" endpoint, and then making requests to the injected scripts.

Recommendations For phpMyBackupPro versions 2.5 and earlier, consider restricting access to the "scheduled.php" endpoint and the path, filename, and dirs parameters until a proper fix is applied. As a temporary workaround, avoid using the vulnerable parameters in the affected endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2015-3640

Produtos afetados

Phpmybackuppro

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2015-3640 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3640 · Nota
• http://securitytracker.com/id/1032250 · Nota
• http://openwall.com/lists/oss-security/2015/05/04/4 · Nota