PT-2008-2132 · Netwerk · Netwerk Smart Publisher

Gold_M · Published 2008-01-31 · Updated 2017-09-29 · CVE-2008-0503

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Netwerk Smart Publisher version 1.0.1

Description The issue allows remote attackers to execute arbitrary PHP code. This is achieved via the filedata parameter in the admin/op/disp.php file.

Recommendations For Netwerk Smart Publisher version 1.0.1, avoid using the filedata parameter in the admin/op/disp.php file until a fix is available. As a temporary workaround, consider restricting access to the admin/op/disp.php file to minimize the risk of exploitation.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2008-0503

Affected Products

Netwerk Smart Publisher

References · 5

• 🔥 https://exploit-db.com/exploits/5003 · Exploit
• http://secunia.com/advisories/28685 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-0503 · Security Note
• http://vupen.com/english/advisories/2008/0352 · Note
• http://securityfocus.com/bid/27488 · Note