PT-2019-13493 · Comsenz · Discuz!Ml

CVE-2019-13956 · Publicado 2019-07-18 · Atualizado 2024-10-04

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Discuz!ML versions 3.2 through 3.4

Description The issue allows remote attackers to execute arbitrary PHP code via a modified language cookie. This can be achieved by altering the cookie value, for example, changing 4gH4 0df5 language=en to 4gH4 0df5 language=en'.phpinfo().';. The attack vector involves manipulating the language parameter in the cookie to inject malicious PHP code.

Recommendations For Discuz!ML versions 3.2 through 3.4, consider restricting access to the language cookie or implementing input validation to prevent malicious modifications. As a temporary workaround, monitor server logs for suspicious activity related to the language cookie.

Exploit

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2019-13956

Produtos afetados

Discuz!Ml

Referências · 5

• 🔥 http://esoln.net/esoln/blog/2019/06/14/discuzml-v-3-x-code-injection-vulnerability · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-13956 · Nota de Segurança
• https://twitter.com/rst_cloud/status/1842218492965138524 · Publicação no Twitter
• https://t.me/aptreports/13092 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2019-13956 · Aviso do Fabricante