PT-2008-4352 · Devalcms · Devalcms

Cwh Underground · Published 2008-06-30 · Updated 2017-09-29 · CVE-2008-2913

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Devalcms version 1.4a

Description A directory traversal issue exists due to the lack of proper input validation in the func.php file when magic quotes gpc is disabled. This allows remote attackers to include and execute arbitrary local files by manipulating the currentpath parameter with a .. (dot dot) sequence, in combination with specific ... (triple dot) and ..... sequences in the currentfile parameter, to index.php.

Recommendations For Devalcms version 1.4a, consider disabling the execution of external files through the func.php file until a proper patch is available, and ensure magic quotes gpc is enabled to mitigate the risk of directory traversal attacks.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2008-2913

Affected Products

Devalcms

References · 5

• 🔥 http://securityfocus.com/bid/29728 · Exploit
• 🔥 https://exploit-db.com/exploits/5822 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-2913 · Security Note
• http://secunia.com/advisories/30585 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43116 · Note