PT-2008-3320 · Advanced Software Engineering Limited · Chartdirector

Stack-Terrorist · Published 2008-04-15 · Updated 2017-09-29 · CVE-2008-1782

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions ChartDirector version 4.1

Description The issue allows remote attackers to read sensitive files. This is achieved via the file parameter in the phpdemo/viewsource.php file.

Recommendations For ChartDirector version 4.1, restrict access to the phpdemo/viewsource.php file to minimize the risk of exploitation. As a temporary workaround, consider disabling the use of the file parameter in this file until a patch is available.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2008-1782

Affected Products

Chartdirector

References · 5

• 🔥 http://securityfocus.com/bid/28674 · Exploit
• 🔥 https://exploit-db.com/exploits/5399 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-1782 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41701 · Note
• http://vupen.com/english/advisories/2008/1140/references · Note