PT-2005-5005 · Limbo · Limbo Cms

Rgod · Published 2005-12-17 · Updated 2018-10-19 · CVE-2005-4317

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Limbo CMS versions 1.0.4.2 and earlier

Description The issue allows remote attackers to modify the $ SERVER variable, which can be used to conduct cross-site scripting (XSS) attacks in the stats module or execute arbitrary code via an eval injection attack in the wrapper option in "index2.php". This is possible when the register globals setting is off.

Recommendations For Limbo CMS versions 1.0.4.2 and earlier, as a temporary workaround, consider disabling the eval function in the wrapper option in "index2.php" until a patch is available. Restrict access to the stats module to minimize the risk of XSS attacks. Avoid using the SERVER[REMOTE ADDR] parameter in sensitive operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2005-4317

Affected Products

Limbo Cms

References · 11

• 🔥 https://exploit-db.com/exploits/26836 · Exploit
• 🔥 http://rgod.altervista.org/limbo1042_xpl.html · Exploit
• 🔥 http://securitytracker.com/id?1015364 · Exploit
• 🔥 http://securityfocus.com/bid/15871 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-4317 · Security Note
• http://secunia.com/advisories/18063 · Vendor Advisory
• http://vupen.com/english/advisories/2005/2932 · Note
• http://osvdb.org/21754 · Note
• http://osvdb.org/21756 · Note
• http://securityfocus.com/archive/1/419470/100/0/threaded · Note
• http://securityreason.com/securityalert/255 · Note