PT-2008-6729 · Kwalbum · Kwalbum

Cwh Underground · Published 2008-12-18 · Updated 2017-09-29 · CVE-2008-5677

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Kwalbum versions 2.0.4, 2.0.2, and earlier

Description The issue allows remote authenticated users with upload capability to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file under items/. This is related to the ReplaceBadFilenameChars function in include/ItemAdder.php.

Recommendations For Kwalbum versions 2.0.4, 2.0.2, and earlier, consider restricting access to the file upload feature to prevent exploitation until a fix is available. As a temporary workaround, restrict access to the items/ directory to minimize the risk of arbitrary code execution. Avoid using the file upload capability with executable extensions until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2008-5677

Affected Products

Kwalbum

References · 6

• 🔥 https://exploit-db.com/exploits/6664 · Exploit
• 🔥 http://securityfocus.com/bid/31568 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-5677 · Security Note
• http://secunia.com/advisories/32145 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45655 · Note
• http://securityreason.com/securityalert/4789 · Note