PT-2009-3098 · Gr Board · Gboard

Published 2009-02-05 · Updated 2017-09-29 · CVE-2009-0444

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions GRBoard version 1.8

Description The issue allows remote attackers to execute arbitrary PHP code via a URL in certain parameters when register globals is enabled and magic quotes gpc is disabled. This can be achieved through the theme parameter to various PHP files in the theme/ directory, the path parameter to latest/sirini gallery latest/list.php, and the grboard parameter to include.php and form mail.php. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited.

Recommendations For GRBoard version 1.8, consider disabling the register globals setting and enabling magic quotes gpc to prevent exploitation. Additionally, restrict access to the vulnerable API endpoints, such as "179 squarebox pds list/view.php", "latest/sirini gallery latest/list.php", "include.php", and "form mail.php", by limiting the input for the theme, path, and grboard parameters. Avoid using the theme, path, and grboard parameters in the affected API endpoints until the issue is resolved.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2009-0444

Affected Products

Gboard

References · 4

• 🔥 https://exploit-db.com/exploits/7979 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-0444 · Security Note
• http://secunia.com/advisories/33812 · Vendor Advisory
• http://securityfocus.com/bid/33602 · Note