PT-2007-2274 · Atsphp · Atsphp

Published 2007-02-07 · Updated 2024-08-07 · CVE-2007-0831

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Atsphp version 5.0.1

Description: Multiple PHP remote file inclusion issues allow remote attackers to execute arbitrary PHP code via a URL in the CONF[path] parameter to API endpoints such as "index.php", "sources/usercp.php", or "sources/admin.php". However, it is noted that another researcher has disputed this issue, stating that CONF[path] is defined before use in "index.php" and that CONF[path] inclusion cannot occur through a direct request to other affected files, and also mentioning that "usercp.php" is a typo of "user cp.php".

Recommendations: For Atsphp version 5.0.1, as a temporary workaround, consider restricting access to the CONF[path] parameter in the affected API endpoints until a patch is available. Additionally, verify the correct filename for the user control panel, using "user cp.php" instead of "usercp.php" to avoid potential issues.

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2007-0831

Affected Products

Atsphp

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2007-0831 · Security Note
• https://t.me/cvenotify/89632 · Telegram Post
• http://securityfocus.com/archive/1/458600/100/0/threaded · Note
• http://securityfocus.com/archive/1/458581/100/100/threaded · Note