PT-2018-5083 · Php · Php Formmail Generator

Ibram Marzouk · Publicado 2018-07-13 · Atualizado 2019-10-09 · CVE-2016-9493

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions PHP FormMail Generator versions prior to 17 December 2016

Description The issue concerns stored cross-site scripting in the code generated by PHP FormMail Generator. The generated form.lib.php file checks upload file types against a hard-coded list of dangerous extensions, but this list does not include all variations of PHP files. This may allow execution of the contained PHP code if an attacker can guess the uploaded filename, as the form appends a short random string to the end of the filename by default.

Recommendations For versions prior to 17 December 2016, consider updating the form.lib.php file to include all variations of PHP files in the list of dangerous extensions to prevent potential execution of malicious PHP code. As a temporary workaround, restrict the upload of PHP files and consider disabling the file upload feature until a proper fix is applied.

Correção

XSS

Enumeração de Fraquezas

CWE-80

CWE-79

Identificadores relacionados

CVE-2016-9493

Produtos afetados

Php Formmail Generator

Referências · 4

• http://securityfocus.com/bid/96718 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-9493 · Nota de Segurança
• https://kb.cert.org/vuls/id/608591 · Nota
• https://osv.dev/vulnerability/CVE-2016-9493 · Aviso do Fabricante