PT-2009-2135 · Ananta · Ananta Cms

Cwh Underground · Published 2009-04-08 · Updated 2017-09-29 · CVE-2008-6665

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Ananta CMS version 1.0b5

Description The issue allows remote attackers to gain administrator privileges via a crafted email parameter, possibly related to code injection, when magic quotes gpc is disabled.

Recommendations For Ananta CMS version 1.0b5, consider disabling the change.php script or restricting access to it until a patch is available, and ensure magic quotes gpc is enabled to minimize the risk of exploitation.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2008-6665

Affected Products

Ananta Cms

References · 4

• 🔥 http://securityfocus.com/bid/29752 · Exploit
• 🔥 https://exploit-db.com/exploits/5824 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-6665 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43119 · Note