PT-2007-3754 · Comdev · Comdev One Admin Modules Builder

Published 2007-05-02 · Updated 2025-01-17 · CVE-2007-2422

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Comdev One Admin Modules Builder (modbuild) version 4.1

Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the path[docroot] parameter to (1) "config-bak.php" or (2) "config.php" endpoints. However, it's noted that unmodified scripts set the applicable variable to an empty string, and reasonable modified copies would use a fixed pathname string.

Recommendations For Comdev One Admin Modules Builder (modbuild) version 4.1, consider restricting access to the "config-bak.php" and "config.php" endpoints to minimize the risk of exploitation. As a temporary workaround, avoid using the path[docroot] parameter in these endpoints until the issue is resolved.

Fix

Related Identifiers

CVE-2007-2422

Affected Products

Comdev One Admin Modules Builder

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2007-2422 · Security Note
• https://t.me/cvenotify/107766 · Telegram Post
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33917 · Note
• http://securityfocus.com/archive/1/466953/100/0/threaded · Note
• http://securityreason.com/securityalert/2659 · Note
• https://t.me/cvenotify/89656 · Telegram Post