PT-2009-2660 · Phpkit · Phpkit

Published 2009-09-09 · Updated 2018-10-11 · CVE-2008-7193

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PHPKIT version 1.6.4 PL1

Description The issue allows remote attackers to conduct cross-site request forgery (CSRF) attacks. This is possible because the session ID is included in the URL, and the PHPKITSID parameter can be read from the HTTP Referer. Attackers can use this information to modify the user profile via the "upload files/include.php" endpoint or create a new administrator via the "upload files/pk/include.php" endpoint.

Recommendations For PHPKIT version 1.6.4 PL1, consider disabling the use of the PHPKITSID parameter in the HTTP Referer as a temporary workaround until a patch is available. Restrict access to the "upload files/include.php" and "upload files/pk/include.php" endpoints to minimize the risk of exploitation.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2008-7193

Affected Products

Phpkit

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2008-7193 · Security Note
• http://osvdb.org/50998 · Note
• http://securityfocus.com/archive/1/487249/100/200/threaded · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-7193 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/40033 · Note