PT-2019-19777 · Sdcms · Sdcms

Publicado 2019-03-11 · Atualizado 2019-03-11 · CVE-2019-9651

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SDCMS version 1.7

Description An issue in the themecontroller.php file allows for PHP code execution due to insufficient filtering in the check bad() function. This is because the filtering does not strictly block all dangerous PHP functions, such as system, and file extensions like ".PHP" are not blocked, while ".php" is.

Recommendations For SDCMS version 1.7, as a temporary workaround, consider disabling the check bad() function or restricting its use until a patch is available. Additionally, restrict access to the themecontroller.php file to minimize the risk of exploitation. Avoid using the system function in the affected controller until the issue is resolved.

Exploit

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2019-9651

Produtos afetados

Sdcms

Referências · 3

• 🔥 http://iwantacve.cn/index.php/archives/155 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-9651 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-9651 · Aviso do Fabricante