PT-2019-12312 · Cutephp · Cutenews

Akkus + 1 · Publicado 2019-04-22 · Atualizado 2020-09-11 · CVE-2019-11447

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CutePHP CuteNews version 2.1.2

Description An issue allows an attacker to infiltrate the server through the avatar upload process in the profile area via the "index.php?mod=main&opt=personal" endpoint, by exploiting the avatar file field. The lack of effective control of $imgsize in /core/modules/dashboard.php enables an attacker to change the header content of a file, bypass controls, and potentially achieve code execution, for example, by using a GIF header.

Recommendations For CutePHP CuteNews version 2.1.2, consider disabling the avatar upload feature in the profile area until a patch is available to prevent exploitation through the avatar file field in the "index.php?mod=main&opt=personal" endpoint. Restrict access to the /core/modules/dashboard.php module to minimize the risk of exploitation related to the $imgsize variable.

Exploit

Correção

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2019-11447

Produtos afetados

Cutenews

Referências · 8

• 🔥 https://github.com/thewhiteh4t/cve-2019-11447 · Exploit
• 🔥 https://pentest.com.tr/exploits/CuteNews-2-1-2-Remote-Code-Execution-Metasploit.html · Exploit
• 🔥 https://exploit-db.com/exploits/46698 · Exploit
• 🔥 http://pentest.com.tr/exploits/CuteNews-2-1-2-Remote-Code-Execution-Metasploit.html · Exploit
• 🔥 https://exploit-db.com/exploits/48800 · Exploit
• https://osv.dev/vulnerability/CVE-2019-11447 · Aviso do Fabricante
• http://packetstormsecurity.com/files/159134/CuteNews-2.1.2-Remote-Code-Execution.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-11447 · Nota de Segurança