PT-2010-2778 · Phpkobo · Phpkobo Adfreely

Ahmadbady · Published 2010-03-23 · Updated 2017-08-17 · CVE-2010-1057

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Phpkobo AdFreely (aka Ad Board Script) version 1.01

Description The issue allows remote attackers to include and execute arbitrary local files via a ..// (dot dot slash slash) in the LANG CODE parameter to various files, including common.inc.php in multiple directories such as codelib/cfg/, codelib/sys/, staff/, staff/app/, and staff/file.php, when magic quotes gpc is disabled.

Recommendations For Phpkobo AdFreely (aka Ad Board Script) version 1.01, consider disabling the LANG CODE parameter in the affected files until a patch is available. Restrict access to the common.inc.php file in the mentioned directories to minimize the risk of exploitation. Additionally, enable magic quotes gpc to prevent this type of attack.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2010-1057

Affected Products

Phpkobo Adfreely

References · 9

• 🔥 http://securityfocus.com/bid/38731 · Exploit
• 🔥 http://exploit-db.com/exploits/11722 · Exploit
• 🔥 https://exploit-db.com/exploits/11722 · Exploit
• http://secunia.com/advisories/38947 · Vendor Advisory
• http://vupen.com/english/advisories/2010/0611 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-1057 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/56858 · Note
• http://osvdb.org/62926 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/56865 · Note