PT-2007-6240 · Puzzle Apps · Puzzle Apps Cms
Arfis
·
Published
2007-10-01
·
Updated
2008-09-05
·
CVE-2007-5147
CVSS v2.0
6.8
Medium
| Vector | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Puzzle Apps CMS version 2.2.1
Description
The issue allows remote attackers to execute arbitrary PHP code. This can be achieved via a URL in the
MODULEDIR parameter to various PHP files, including 'core/modules/my/my.module.php' and 'core/modules/xml/xml.module.php'. Additionally, the COREROOT parameter in files such as 'config.loader.php', 'platform.loader.php', and others in the 'core/' directory or 'install/steps/step 3.php' can be exploited. The THISDIR parameter in files like 'people.lib.php', 'general.lib.php', and others in 'core/modules/admin/libs/' or 'core/modules/webstat/MEC/index.php' is also vulnerable.Recommendations
For Puzzle Apps CMS version 2.2.1, consider disabling the
MODULEDIR, COREROOT, and THISDIR parameters in the affected PHP files until a patch is available. Restrict access to the vulnerable modules and files, such as 'my.module.php', 'xml.module.php', 'config.loader.php', and others, to minimize the risk of exploitation. Avoid using the MODULEDIR, COREROOT, and THISDIR parameters in the affected API endpoints until the issue is resolved.Fix
Code Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Puzzle Apps Cms