PT-2008-4117 · Erfurtwiki · Erfurtwiki

Unohope · Published 2008-06-12 · Updated 2018-10-11 · CVE-2008-2672

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ErfurtWiki versions R1.02b and earlier

Description The issue allows remote attackers to include and execute arbitrary local files via directory traversal vulnerabilities. This can be achieved by using a .. (dot dot) in the ewiki id and ewiki action parameters to "fragments/css.php", and possibly the id parameter to the default URI. The default URI is site-specific but often performs an include once of ewiki.php.

Recommendations For ErfurtWiki versions R1.02b and earlier, consider disabling the register globals setting to mitigate the risk of exploitation. As a temporary workaround, restrict access to the "fragments/css.php" file and the default URI to minimize the risk of exploitation. Avoid using the ewiki id, ewiki action, and id parameters in the affected API endpoints until the issue is resolved.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2008-2672

Affected Products

Erfurtwiki

References · 7

• 🔥 http://securityfocus.com/bid/29628 · Exploit
• 🔥 https://exploit-db.com/exploits/5771 · Exploit
• 🔥 http://chroot.org/exploits/chroot_uu_007 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-2672 · Security Note
• http://securityfocus.com/archive/1/493219/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42981 · Note
• http://securityreason.com/securityalert/3936 · Note