PT-2018-17532 · Joomla · Joomla! Picture Calendar

Ihsan Sencan · Publicado 2018-01-30 · Atualizado 2018-02-15 · CVE-2018-6397

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Joomla! Picture Calendar version 3.1.4

Description A Directory Traversal issue exists in the Picture Calendar component for Joomla!. The issue is related to the folder parameter in the list.php file.

Recommendations For version 3.1.4, consider restricting access to the list.php file until a patch is available. As a temporary workaround, avoid using the folder parameter in the affected list.php file to minimize the risk of exploitation.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2018-6397

Produtos afetados

Joomla! Picture Calendar

Referências · 3

• 🔥 https://exploit-db.com/exploits/43931 · Exploit
• https://osv.dev/vulnerability/CVE-2018-6397 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-6397 · Nota de Segurança