PT-2008-6654 · Mini Cms · Mini Cms

Condemned · Published 2008-12-16 · Updated 2017-09-29 · CVE-2008-5593

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Mini CMS version 1.0.1

Description The issue concerns directory traversal vulnerabilities in the index.php file of Mini CMS. These vulnerabilities allow remote attackers to include and execute arbitrary local files by utilizing a .. (dot dot) in the page and admin parameters.

Recommendations For Mini CMS version 1.0.1, consider restricting access to the page and admin parameters in the index.php file to minimize the risk of exploitation. As a temporary workaround, avoid using the page and admin parameters with untrusted input until a patch is available.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2008-5593

Affected Products

Mini Cms

References · 5

• 🔥 https://exploit-db.com/exploits/7375 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-5593 · Security Note
• http://secunia.com/advisories/33024 · Vendor Advisory
• http://securityfocus.com/bid/32680 · Note
• http://securityreason.com/securityalert/4750 · Note