PT-2009-2676 · Nonecms · Nonecms

Published 2009-09-11 · Updated 2018-10-11 · CVE-2008-7209

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions OneCMS versions 2.4 and earlier

Description The issue allows remote attackers to execute arbitrary code by uploading a file with an executable extension and using a safe content type, then accessing it via a direct request to the file. This is possible due to an unrestricted file upload vulnerability in the add2 action in a upload.php.

Recommendations For OneCMS versions 2.4 and earlier, restrict file uploads to only allow safe file types and ensure proper validation of uploaded files to prevent executable code from being uploaded. As a temporary workaround, consider restricting access to the a upload.php file until a proper fix is applied.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2008-7209

Affected Products

Nonecms

References · 10

• 🔥 http://bugreport.ir/index_26.htm · Exploit
• 🔥 https://exploit-db.com/exploits/4857 · Exploit
• 🔥 http://securityfocus.com/bid/27158 · Exploit
• http://vupen.com/english/advisories/2008/0081 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-7209 · Security Note
• http://osvdb.org/51117 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39485 · Note
• http://sourceforge.net/forum/forum.php?forum_id=774946 · Note
• http://securityfocus.com/archive/1/485837/100/200/threaded · Note
• http://securityfocus.com/archive/1/487136/100/200/threaded · Note