PT-2009-1652 · Lightblog · Lightblog

Joss · Published 2009-02-19 · Updated 2017-09-29 · CVE-2008-6177

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions LightBlog version 9.8

Description The issue allows remote attackers to include and execute arbitrary local files. This can be achieved by exploiting directory traversal vulnerabilities when the magic quotes gpc setting is disabled. The vulnerabilities exist in the username parameter to view member.php, the username post parameter to login.php, and the Lightblog username cookie parameter to check user.php. Attackers can use a .. (dot dot) sequence in these parameters to traverse directories.

Recommendations For LightBlog version 9.8, consider disabling the view member.php, login.php, and check user.php scripts until a patch is available, or restrict access to these scripts to minimize the risk of exploitation. Additionally, enable the magic quotes gpc setting to prevent directory traversal attacks via the username, username post, and Lightblog username parameters.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2008-6177

Affected Products

Lightblog

References · 5

• 🔥 https://exploit-db.com/exploits/6797 · Exploit
• 🔥 http://securityfocus.com/bid/31851 · Exploit
• http://secunia.com/advisories/32345 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-6177 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46030 · Note