PT-2009-4404 · Unclassified · Unclassified Newsboard

Girex · Published 2009-06-05 · Updated 2017-09-29 · CVE-2009-1948

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Unclassified NewsBoard (UNB) version 1.6.4

Description: The issue allows remote attackers to read arbitrary recently-modified files or include and execute arbitrary local files due to directory traversal vulnerabilities in the forum.php file. This occurs when register globals is enabled and magic quotes gpc is disabled. The attack can be performed by exploiting the GLOBALS[filename] parameter or the GLOBALS[UTE][ tplCollection][a][file] parameter using a .. (dot dot) sequence.

Recommendations: For Unclassified NewsBoard (UNB) version 1.6.4, consider disabling the register globals setting and enabling magic quotes gpc to prevent exploitation. Additionally, restrict access to the forum.php file and its parameters, such as GLOBALS[filename] and GLOBALS[UTE][ tplCollection][a][file], to minimize the risk of directory traversal attacks.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2009-1948

Affected Products

Unclassified Newsboard

References · 6

• 🔥 https://exploit-db.com/exploits/8841 · Exploit
• 🔥 http://securityfocus.com/bid/35183 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-1948 · Security Note
• http://secunia.com/advisories/35299 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50878 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50877 · Note