PT-2009-3788 · Blogplus · Blognplus

Ahmadbady · Published 2009-04-06 · Updated 2017-09-29 · CVE-2009-1246

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Blogplus version 1.0

Description The issue allows remote attackers to include and execute arbitrary local files via directory traversal vulnerabilities. This can be achieved by manipulating specific parameters in various PHP files, including row mysql blocks center down[file] in "includes/block center down.php", row mysql blocks center top[file] in "includes/block center top.php", row mysql blocks left[file] in "includes/block left.php", row mysql blocks right[file] in "includes/block right.php", and row mysql bloginfo[theme] in "includes/window down.php" and "includes/window top.php".

Recommendations For Blogplus version 1.0, consider restricting access to the vulnerable parameters row mysql blocks center down[file], row mysql blocks center top[file], row mysql blocks left[file], row mysql blocks right[file], and row mysql bloginfo[theme] to minimize the risk of exploitation. Additionally, avoid using the .. (dot dot) notation in these parameters until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2009-1246

Affected Products

Blognplus

References · 4

• 🔥 http://securityfocus.com/bid/34261 · Exploit
• 🔥 https://exploit-db.com/exploits/8290 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-1246 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49446 · Note