PT-2018-14965 · Logicspice · Logicspice Faq Script

Akkus + 1 · Publicado 2018-11-22 · Atualizado 2018-12-18 · CVE-2018-19457

Positive Technologies (AI Summary)

CVSS v3.1

7.2

Alta

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Logicspice FAQ Script version 2.9.7

Description The issue allows uploading arbitrary files, leading to remote command execution. This can be achieved via the "admin/faqs/faqimages" endpoint with a .php file.

Recommendations For version 2.9.7, consider disabling the file upload functionality in the "admin/faqs/faqimages" endpoint until a patch is available. Restrict access to this endpoint to minimize the risk of exploitation. Avoid using this endpoint with .php files until the issue is resolved.

Exploit

Correção

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2018-19457

Produtos afetados

Logicspice Faq Script

Referências · 4

• 🔥 https://pentest.com.tr/exploits/Logicspice-FAQ-Script-2-9-7-Remote-Code-Execution.html · Exploit
• 🔥 https://exploit-db.com/exploits/45326 · Exploit
• https://osv.dev/vulnerability/CVE-2018-19457 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-19457 · Nota de Segurança