PT-2019-14569 · Doccms · Doccms

Publicado 2019-09-09 · Atualizado 2020-08-24 · CVE-2019-16192

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions DocCms version 2016.5.17

Description The issue allows remote attackers to execute arbitrary PHP code through module management files. This can be achieved by uploading a .php file in a ZIP archive, exploiting the upload model() function in the /admini/controllers/system/managemodel.php file.

Recommendations For DocCms version 2016.5.17, consider disabling the upload model() function in the /admini/controllers/system/managemodel.php file as a temporary workaround to prevent exploitation. Restrict access to module management files to minimize the risk of arbitrary PHP code execution. Avoid using the module management feature until a fix is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2019-16192

Produtos afetados

Doccms

Referências · 3

• 🔥 https://github.com/SuperSalsa20/Doccms-Execute-Code/blob/master/README.md · Exploit
• https://osv.dev/vulnerability/CVE-2019-16192 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-16192 · Nota de Segurança