PT-2008-3759 · Cms Made Simple · Cms Made Simple

Egix · Published 2008-05-16 · Updated 2017-09-29 · CVE-2008-2267

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: CMS Made Simple versions 1.2.4 and earlier

Description: The issue allows remote attackers to execute arbitrary code by uploading a file with a name ending in certain extensions, such as .jsp, .php3, .cgi, .dhtml, .phtml, .php5, or .jar, and then accessing it via a direct request to the file in modules/FileManager/postlet/.

Recommendations: For CMS Made Simple versions 1.2.4 and earlier, update to a version later than 1.2.4 to resolve the issue. As a temporary workaround, consider restricting access to the javaUpload.php file in the FileManager module to minimize the risk of exploitation. Avoid using the vulnerable file extensions in the affected module until the issue is resolved.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2008-2267

Affected Products

Cms Made Simple

References · 8

• 🔥 http://securityfocus.com/bid/29170 · Exploit
• 🔥 https://exploit-db.com/exploits/5600 · Exploit
• http://secunia.com/advisories/30208 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-2267 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2267 · Note
• http://blog.cmsmadesimple.org/2008/05/12/announcing-cms-made-simple-125 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42371 · Note
• http://attrition.org/pipermail/vim/2008-May/001978.html · Note