PT-2008-3690 · Smblog · Smartblog

Published 2008-05-13 · Updated 2017-08-08 · CVE-2008-2185

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions SMartBlog (aka SMBlog) version 1.3

Description A directory traversal issue exists, allowing remote attackers to include arbitrary local files. This is achieved by using directory traversal sequences in the page parameter of the index.php file.

Recommendations For SMartBlog (aka SMBlog) version 1.3, consider restricting access to the index.php file until a patch is available, or apply configuration changes to prevent directory traversal attacks, such as validating and sanitizing the page parameter.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2008-2185

Affected Products

Smartblog

References · 5

• 🔥 https://exploit-db.com/exploits/5535 · Exploit
• http://secunia.com/advisories/30057 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-2185 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42192 · Note
• http://securityfocus.com/bid/29043 · Note