PT-2017-7232 · Yeager · Yeager Cms

P. Morimoto · Publicado 2017-04-24 · Atualizado 2018-10-09 · CVE-2015-7570

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Yeager CMS version 1.2.1

Description The issue allows remote attackers to trigger outbound requests and enumerate open ports. This is achieved via the dbhost parameter to specific API endpoints, including 'libs/org/adodb lite/tests/test adodb lite.php', 'libs/org/adodb lite/tests/test datadictionary.php', or 'libs/org/adodb lite/tests/test adodb lite sessions.php'.

Recommendations For Yeager CMS version 1.2.1, as a temporary workaround, consider restricting access to the dbhost parameter in the affected API endpoints until a patch is available. Avoid using the dbhost parameter in the specified endpoints to minimize the risk of exploitation.

Exploit

Correção

SSRF

Enumeração de Fraquezas

CWE-918

Identificadores relacionados

CVE-2015-7570

Produtos afetados

Yeager Cms

Referências · 5

• 🔥 https://exploit-db.com/exploits/39436 · Exploit
• 🔥 http://packetstormsecurity.com/files/135716/Yeager-CMS-1.2.1-File-Upload-SQL-Injection-XSS-SSRF.html · Exploit
• http://securityfocus.com/archive/1/537493/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-7570 · Nota de Segurança
• http://seclists.org/fulldisclosure/2016/Feb/44 · Correção