PT-2012-2108 · Fcms · Family Connections Cms

Mr_Me · Published 2012-08-30 · Updated 2017-08-29 · CVE-2011-5130

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Family Connections CMS (FCMS) versions 2.5.0 through 2.7.1

Description The issue allows remote attackers to execute arbitrary commands. This is possible when the register globals setting is enabled, and shell metacharacters are used in the argv[1] parameter.

Recommendations For Family Connections CMS (FCMS) versions 2.5.0 through 2.7.1, consider disabling the register globals setting to prevent exploitation. Additionally, restrict the use of the argv[1] parameter in the dev/less.php file until a patch is available.

Exploit

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2011-5130

Affected Products

Family Connections Cms

References · 12

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/familycms_less_exec.rb · Exploit
• 🔥 http://exploit-db.com/exploits/18198 · Exploit
• 🔥 http://sourceforge.net/apps/trac/fam-connections/ticket/407 · Exploit
• 🔥 https://exploit-db.com/exploits/18208 · Exploit
• 🔥 https://exploit-db.com/exploits/18198 · Exploit
• 🔥 http://exploit-db.com/exploits/18208 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-5130 · Security Note
• https://familycms.com/blog/2011/11/security-vulnerability-fcms-2-5-2-7-1 · Vendor Advisory
• http://secunia.com/advisories/47069 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-5130 · Note
• http://osvdb.org/77492 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/71618 · Note