PT-2008-4279 · Exero · Exero Cms

Published 2008-06-24 · Updated 2008-09-05 · CVE-2008-2840

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Exero CMS versions 1.0.0 through 1.0.1

Description The issue allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the theme parameter to various PHP files, including "custompage.php", "errors/404.php", "members/memberslist.php", "members/profile.php", "news/fullview.php", "news/index.php", "nopermission.php", "usercp/avatar.php", or "usercp/editpassword.php" in "themes/Default/".

Recommendations For Exero CMS versions 1.0.0 and 1.0.1, consider restricting access to the vulnerable PHP files in the "themes/Default/" directory until a patch is available. As a temporary workaround, avoid using the theme parameter in the affected API endpoints until the issue is resolved. Restrict access to the "themes/Default/" directory to minimize the risk of exploitation.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2008-2840

Affected Products

Exero Cms

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2008-2840 · Security Note
• http://secunia.com/advisories/30711 · Vendor Advisory
• http://securityfocus.com/bid/29788 · Patch
• http://sourceforge.net/project/shownotes.php?release_id=607502 · Note