PT-2019-18720 · Metinfo · Metinfo

Publicado 2019-02-11 · Atualizado 2019-02-11 · CVE-2019-7718

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Metinfo versions 6.x

Description An issue was discovered that allows an attacker to execute arbitrary PHP code via a race condition in the backend database backup function. This can be achieved by leveraging the admin/index.php and admin/databack/bakup tables.php endpoints, specifically the n=databack&c=index&a=dogetsql&tables and 2=file put contents parameters. The vulnerability arises from the temporary creation of bakup tables.php by app/system/databack/admin/index.class.php.

Recommendations For Metinfo version 6.x, consider disabling the database backup function temporarily to prevent exploitation until a patch is available. Restrict access to the admin/index.php and admin/databack/bakup tables.php endpoints to minimize the risk of arbitrary PHP code execution. Avoid using the tables parameter in the affected API endpoint until the issue is resolved.

Exploit

Correção

Race Condition

Enumeração de Fraquezas

CWE-362

Identificadores relacionados

CVE-2019-7718

Produtos afetados

Metinfo

Referências · 3

• 🔥 https://github.com/jadacheng/vulnerability/blob/master/Metinfo6.x/MetInfo.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-7718 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-7718 · Aviso do Fabricante