PT-2008-3388 · Make Our Life Easy · Make Our Life Easy

Gold_M · Published 2008-04-16 · Updated 2017-09-29 · CVE-2008-1857

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Make our Life Easy (Mole) version 2.1.0

Description The issue allows remote attackers to read arbitrary files via directory traversal sequences in the dirn and fname parameters in the viewsource.php file.

Recommendations For Make our Life Easy (Mole) version 2.1.0, consider restricting access to the viewsource.php file until a patch is available, and avoid using the dirn and fname parameters in this file to minimize the risk of exploitation.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2008-1857

Affected Products

Make Our Life Easy

References · 6

• 🔥 https://exploit-db.com/exploits/5394 · Exploit
• 🔥 http://securityfocus.com/bid/28659 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-1857 · Security Note
• http://secunia.com/advisories/29685 · Vendor Advisory
• http://vupen.com/english/advisories/2008/1141/references · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41681 · Note