PT-2005-2074 · Modernbill · Modernbill

James Bercegay · Published 2005-04-12 · Updated 2017-07-11 · CVE-2005-1054

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ModernBill versions 4.3.0 and earlier

Description The issue allows remote attackers to execute arbitrary PHP code by modifying the DIR parameter in the news.php file to reference a URL on a remote web server that contains the code. This can be done by accessing the /news.php endpoint and manipulating the DIR parameter to point to a malicious PHP script hosted on a remote server.

Recommendations For ModernBill versions 4.3.0 and earlier, update to a version later than 4.3.0 to resolve the issue. As a temporary workaround, consider restricting access to the news.php file and limiting the ability to modify the DIR parameter to prevent remote code execution.

Exploit

Fix

Related Identifiers

CVE-2005-1054

Affected Products

Modernbill

References · 8

• 🔥 http://securitytracker.com/id?1013672 · Exploit
• 🔥 https://exploit-db.com/exploits/25376 · Exploit
• http://secunia.com/advisories/14890 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-1054 · Security Note
• http://marc.info/?l=bugtraq&m=111323741032183&w=2 · Note
• http://osvdb.org/15427 · Note
• http://gulftech.org/?node=research&article_id=00067-04102005 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20036 · Note