PT-2007-7416 · 1024 · 1024 Cms

Irk4Z · Published 2007-12-28 · Updated 2017-09-29 · CVE-2007-6584

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions 1024 CMS versions 1.3.1 through 1.4.2 beta

Description The issue allows remote attackers to include and execute arbitrary local files via directory traversal vulnerabilities. This can be achieved by exploiting the lang parameter to /pages/print/default/ops/news.php, the theme dir parameter to /pages/download/default/ops/search.php, or the admin theme dir parameter to download.php, forum.php, or news.php in admin/ops/reports/ops/. The vulnerability is exploited using a .. (dot dot) in the respective parameters.

Recommendations For 1024 CMS versions 1.3.1 through 1.4.2 beta, as a temporary workaround, consider restricting access to the vulnerable parameters lang, theme dir, and admin theme dir until a patch is available. Avoid using the .. (dot dot) notation in these parameters to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2007-6584

Affected Products

1024 Cms

References · 11

• 🔥 https://exploit-db.com/exploits/4765 · Exploit
• 🔥 https://exploit-db.com/exploits/5434 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-6584 · Security Note
• http://secunia.com/advisories/29810 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6584 · Note
• http://securityfocus.com/bid/28753 · Note
• http://osvdb.org/41282 · Note
• http://osvdb.org/41280 · Note
• http://osvdb.org/41284 · Note
• http://osvdb.org/41283 · Note
• http://osvdb.org/41281 · Note