PT-2008-2990 · Exero · Exero Cms

Gold_M · Published 2008-03-20 · Updated 2017-09-29 · CVE-2008-1409

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Exero CMS version 1.0.1

Description The issue concerns directory traversal vulnerabilities in the Default theme of Exero CMS. These vulnerabilities allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the theme parameter to various PHP files, including "index.php", "editpassword.php", "avatar.php", "custompage.php", "errors/404.php", "memberslist.php", "profile.php", "fullview.php", and "nopermission.php". The affected endpoints include "/usercp/", "/members/", "/news/", and others.

Recommendations For Exero CMS version 1.0.1, consider restricting access to the vulnerable PHP files until a patch is available. As a temporary workaround, avoid using the theme parameter in the affected API endpoints. Restrict access to the Default theme to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2008-1409

Affected Products

Exero Cms

References · 5

• 🔥 https://exploit-db.com/exploits/5265 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-1409 · Security Note
• http://securityfocus.com/bid/28273 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41238 · Note
• http://vupen.com/english/advisories/2008/0909/references · Note