PT-2019-18609 · Php Scripts Mall · Php Scripts Mall Opensource Classified Ads Script

Publicado 2019-03-20 · Atualizado 2021-07-21 · CVE-2019-7436

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Opensource Classified Ads Script version 3.2.2

Description The issue concerns a directory traversal vulnerability, which occurs when a direct request is made for a listing of an uploads directory. This could potentially allow unauthorized access to sensitive files.

Recommendations For PHP Scripts Mall Opensource Classified Ads Script version 3.2.2, consider restricting access to the uploads directory to prevent exploitation of the directory traversal issue. As a temporary workaround, limit directory listings and ensure proper access controls are in place for the uploads directory. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2019-7436

Produtos afetados

Php Scripts Mall Opensource Classified Ads Script

Referências · 3

• 🔥 https://gkaim.com/cve-2019-7436-vikas-chaudhary · Exploit
• https://osv.dev/vulnerability/CVE-2019-7436 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-7436 · Nota de Segurança