PT-2010-5475 · Dynpg · Dynpg Cms

Published 2010-12-04 · Updated 2021-03-25 · CVE-2010-4399

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions DynPG CMS versions 4.1.1 through 4.2.0

Description The issue allows remote attackers to read arbitrary files due to a directory traversal vulnerability in the languages.inc.php file when magic quotes gpc is disabled. This can be exploited by sending a .. (dot dot) in the CHG DYNPG SET LANGUAGE parameter to "index.php".

Recommendations For DynPG CMS versions 4.1.1 through 4.2.0, consider disabling the CHG DYNPG SET LANGUAGE parameter in the "index.php" file until a patch is available, or enable magic quotes gpc to prevent the directory traversal vulnerability.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2010-4399

Affected Products

Dynpg Cms

References · 9

• 🔥 http://securityfocus.com/bid/45115 · Exploit
• 🔥 http://htbridge.ch/advisory/lfi_in_dynpg.html · Exploit
• 🔥 https://exploit-db.com/exploits/15646 · Exploit
• 🔥 http://exploit-db.com/exploits/15646 · Exploit
• 🔥 http://packetstormsecurity.org/files/view/96230/dynpg-lfisqldisclose.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-4399 · Security Note
• http://secunia.com/advisories/42380 · Vendor Advisory
• http://dynpg.org/cms-freeware_en.php?t=DynPG+Update+4.2.1+Security+Update&read_article=226 · Patch
• http://osvdb.org/69539 · Note