PT-2019-15708 · Fudforum · Fudforum

Liquidsky · Publicado 2019-11-12 · Atualizado 2019-11-15 · CVE-2019-18873

Positive Technologies (AI Summary)

CVSS v3.1

9.0

Crítica

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FUDForum version 3.0.9

Description The issue allows for Stored XSS via the User-Agent HTTP header, potentially resulting in remote code execution. An attacker can compromise the system by using a user account and sending a GET request. When an admin views user information under "User Manager" in the control panel, the malicious payload will execute, enabling the writing of PHP files to the web root and execution of code on the remote server. The problem is located in the admsession.php and admuser.php files.

Recommendations For FUDForum version 3.0.9, consider disabling the User-Agent HTTP header processing in admsession.php and admuser.php as a temporary workaround until a patch is available. Restrict access to the "User Manager" section in the control panel to minimize the risk of exploitation. Avoid using the User-Agent header in GET requests to the affected system until the issue is resolved.

Exploit

Correção

RCE

OS Command Injection

XSS

Enumeração de Fraquezas

CWE-78

CWE-79

Identificadores relacionados

CVE-2019-18873

Produtos afetados

Fudforum

Referências · 6

• 🔥 https://github.com/fuzzlove/FUDforum-XSS-RCE · Exploit
• 🔥 https://exploit-db.com/exploits/47650 · Exploit
• https://sourceforge.net/p/fudforum/code/6321 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-18873 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18873 · Nota
• https://osv.dev/vulnerability/CVE-2019-18873 · Aviso do Fabricante