PT-2019-18968 · Unknown · Online Store System

Publicado 2019-10-01 · Atualizado 2019-10-07 · CVE-2019-8291

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Online Store System version 1.0

Description The issue concerns the delete file.php file in the Online Store System, which fails to verify if a user has administrative rights and does not check for path traversal.

Recommendations For version 1.0, modify the delete file.php file to include checks for administrative rights and path traversal to prevent unauthorized file deletion.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2019-8291

Produtos afetados

Online Store System

Referências · 5

• 🔥 http://openwall.com/lists/oss-security/2019/10/02/1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-8291 · Nota de Segurança
• https://abcprintf.com/view_download.php?id=17 · Nota
• https://osv.dev/vulnerability/CVE-2019-8291 · Aviso do Fabricante
• http://vapidlabs.com/advisory.php?v=210 · Nota