PT-2009-6610 · Oscailt · Oscailt

Published 2009-12-31 · Updated 2017-08-17 · CVE-2009-4512

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Oscailt version 3.3

Description The issue allows remote attackers to include and execute arbitrary local files. This is achieved by exploiting a directory traversal vulnerability in the index.php file when 'Use Friendly URL's' is disabled. The vulnerability can be triggered by including a .. (dot dot) in the obj id parameter.

Recommendations For Oscailt version 3.3, consider disabling the 'Use Friendly URL's' option as a temporary workaround, or restrict access to the index.php file to minimize the risk of exploitation. Avoid using the obj id parameter in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2009-4512

Affected Products

Oscailt

References · 7

• 🔥 http://packetstormsecurity.org/0910-exploits/oscailt33-lfi.txt · Exploit
• 🔥 http://securityreason.com/exploitalert/7422 · Exploit
• 🔥 https://exploit-db.com/exploits/9922 · Exploit
• http://secunia.com/advisories/37180 · Vendor Advisory
• http://vupen.com/english/advisories/2009/3096 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-4512 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54023 · Note