PT-2007-2936 · Metaforum · Metaforum

Gu1Ll4Um3R0M41N · Published 2007-03-20 · Updated 2018-10-16 · CVE-2007-1552

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MetaForum version 0.513 Beta

Description The issue concerns an unrestricted file upload vulnerability. It allows remote attackers to upload and execute arbitrary scripts by exploiting the fact that the software restricts file types based on the MIME type in the Content-type HTTP header. This can be done by using an image MIME type with a filename containing an executable extension, such as .php.

Recommendations For MetaForum version 0.513 Beta, consider restricting file uploads to only necessary and validated types, and ensure that the validation checks both the MIME type and the file extension to prevent uploading executable scripts. As a temporary workaround, consider disabling the file upload functionality in usercp.php until a proper fix is implemented.

Exploit

Fix

Related Identifiers

CVE-2007-1552

Affected Products

Metaforum

References · 8

• 🔥 http://aeroxteam.fr/exploit-MetaForum-0.513b.txt · Exploit
• 🔥 https://exploit-db.com/exploits/3516 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-1552 · Security Note
• http://osvdb.org/34523 · Note
• http://securityfocus.com/bid/23032 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33097 · Note
• http://securityfocus.com/archive/1/463178/100/0/threaded · Note
• http://securityreason.com/securityalert/2454 · Note