PT-2009-4667 · Php · Phpcollegeexchange

Cracker · Published 2009-06-25 · Updated 2017-09-19 · CVE-2009-2218

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions phpCollegeExchange version 0.1.5c

Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the home parameter to several PHP files, including (1) i head.php, (2) i nav.php, (3) user new 2.php, or (4) house/myrents.php, when register globals is enabled. Additionally, similar issues exist in (5) allbooks.php, (6) home.php, or (7) mybooks.php in the books/ directory.

Recommendations For phpCollegeExchange version 0.1.5c, consider disabling the register globals setting to prevent exploitation. As a temporary workaround, restrict access to the vulnerable PHP files, including i head.php, i nav.php, user new 2.php, house/myrents.php, allbooks.php, home.php, and mybooks.php, until a patch is available. Avoid using the home parameter in the affected PHP files until the issue is resolved.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2009-2218

Affected Products

Phpcollegeexchange

References · 4

• 🔥 http://exploit-db.com/exploits/9008 · Exploit
• 🔥 https://exploit-db.com/exploits/9008 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-2218 · Security Note
• http://secunia.com/advisories/35452 · Vendor Advisory