PT-2018-12833 · Isweb · Cms Isweb

Rafael Fontes Souza + 1 · Publicado 2018-09-28 · Atualizado 2018-12-19 · CVE-2018-14957

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CMS ISWEB version 3.5.3

Description The issue allows for directory traversal and local file download. This can be demonstrated through the "moduli/downloadFile.php" endpoint with a file parameter set to oggetto documenti/../.././inc/config.php, potentially allowing an attacker to gain control of the application due to credentials being present in the config.php file.

Recommendations For CMS ISWEB version 3.5.3, consider restricting access to the moduli/downloadFile.php endpoint or implementing validation on the file parameter to prevent directory traversal attacks. As a temporary workaround, consider removing or securing the config.php file to prevent credential exposure until a patch is available.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2018-14957

Produtos afetados

Cms Isweb

Referências · 3

• 🔥 https://cxsecurity.com/issue/WLB-2018090248 · Exploit
• https://osv.dev/vulnerability/CVE-2018-14957 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-14957 · Nota de Segurança