PT-2011-2417 · Lotus · Lotuscms Fraise

Mr_Me · Published 2011-01-20 · Updated 2017-08-17 · CVE-2011-0518

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions LotusCMS Fraise version 3.0

Description A directory traversal issue exists in the core/lib/router.php file of LotusCMS Fraise. This issue allows remote attackers to include and execute arbitrary local files when the magic quotes gpc setting is disabled. The vulnerability can be exploited via the system parameter to the "index.php" endpoint.

Recommendations For LotusCMS Fraise version 3.0, consider disabling the magic quotes gpc setting or restricting access to the system parameter in the "index.php" endpoint until a patch is available. As a temporary workaround, restrict the execution of arbitrary local files to minimize the risk of exploitation.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2011-0518

Affected Products

Lotuscms Fraise

References · 9

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/lcms_php_exec.rb · Exploit
• 🔥 https://exploit-db.com/exploits/15964 · Exploit
• 🔥 http://exploit-db.com/exploits/15964 · Exploit
• http://vupen.com/english/advisories/2011/0073 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-0518 · Security Note
• http://secunia.com/advisories/42835 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0518 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64736 · Note
• http://osvdb.org/70409 · Note