PT-2012-1491 · Cmscout+1 · Cmscout+1

Published 2012-11-26 · Updated 2017-08-29 · CVE-2010-5281

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions CMScout 2.09 IBrowser TinyMCE Plugin version 1.4.1

Description The issue allows remote attackers to read arbitrary files via a .. (dot dot) in the lang parameter when magic quotes gpc is disabled.

Recommendations For CMScout 2.09 IBrowser TinyMCE Plugin version 1.4.1, consider disabling the lang parameter in the ibrowser.php file until a patch is available. Restrict access to sensitive files to minimize the risk of exploitation. Enable magic quotes gpc to prevent this issue.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2010-5281

Affected Products

Cmscout

Tinymce

References · 7

• 🔥 http://osvdb.org/68247 · Exploit
• 🔥 https://exploit-db.com/exploits/17850 · Exploit
• http://secunia.com/advisories/41634 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-5281 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/62066 · Note
• http://johnleitch.net/Vulnerabilities/CMScout.2.09.IBrowser.TinyMCE.Plugin.Local.File.Inclusion/33 · Note
• http://packetstormsecurity.org/1009-exploits/cmscout209-lfi.txt · Note