PT-2019-6894 · Mambo · Mambo Cms

Larry W. Cashdollar + 1 · Publicado 2019-02-15 · Atualizado 2019-04-15 · CVE-2013-2565

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mambo CMS version 4.6.5

Description A vulnerability in the scripts thumbs.php, editorFrame.php, editor.php, images.php, manager.php discloses the root path of the webserver.

Recommendations For Mambo CMS version 4.6.5, consider restricting access to the vulnerable scripts thumbs.php, editorFrame.php, editor.php, images.php, manager.php to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2013-2565

Produtos afetados

Mambo Cms

Referências · 4

• 🔥 http://vapidlabs.com/advisory.php?v=75 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-2565 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2565 · Nota
• http://sourceforge.net/projects/mambo · Nota