PT-2009-3310 · Ravennuke · Ravennuke

Janek Vind + 1 · Published 2009-02-22 · Updated 2018-10-10 · CVE-2009-0677

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions RavenNuke version 2.30

Description The issue allows remote authenticated users to execute arbitrary code via PHP sequences in an element of the replacements array, which is processed by the preg replace function with the eval switch, as specified in an element of the patterns array. This is accessible through modules.php in the Your Account module, specifically in avatarlist.php.

Recommendations For RavenNuke version 2.30, consider disabling the eval switch in the preg replace function or restricting access to avatarlist.php to minimize the risk of exploitation. Additionally, avoid using the replacements array and patterns array with untrusted input until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2009-0677

Affected Products

Ravennuke

References · 9

• 🔥 https://exploit-db.com/exploits/8068 · Exploit
• http://ravenphpscripts.com/postt17156.html&sid=12d1201371612260a42fa846ebce7bad · Vendor Advisory
• http://secunia.com/advisories/33928 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-0677 · Security Note
• http://osvdb.org/52007 · Note
• http://securityfocus.com/archive/1/500988/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/48789 · Note
• http://securityfocus.com/bid/33787 · Note
• http://waraxe.us/advisory-72.html · Note