PT-2009-6042 · Runcms · Runcms

Published 2009-10-27 · Updated 2009-10-28 · CVE-2009-3815

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions RunCMS version 2M1

Description The issue allows remote attackers to obtain sensitive information when certain error reporting levels are used. This is achieved via the op[] parameter to "modules/contact/index.php" or the uid[] parameter to "userinfo.php". The installation path is leaked in an error message when these parameters are used in a call to the preg match() function.

Recommendations For RunCMS version 2M1, consider disabling the error reporting feature or adjusting its levels to prevent sensitive information disclosure until a patch is available. Restrict access to the "modules/contact/index.php" and "userinfo.php" scripts to minimize the risk of exploitation. Avoid using the op[] and uid[] parameters in the affected API endpoints until the issue is resolved.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2009-3815

Affected Products

Runcms

References · 3

• 🔥 http://retrogod.altervista.org/9sg_runcms_forum_sql.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-3815 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3815 · Note