PT-2012-2992 · Impresscms · Impresscms

Published 2012-10-06 · Updated 2017-12-01 · CVE-2012-0987

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ImpressCMS versions 1.2.x through 1.2.6 and versions 1.3.x through 1.3.0

Description The issue allows remote authenticated users to include and execute arbitrary local files. This is achieved by exploiting a directory traversal vulnerability in the edituser.php file, specifically by using a .. (dot dot) in the icmsConfigPlugins[sanitizer plugins][] parameter.

Recommendations For ImpressCMS versions 1.2.x through 1.2.6, update to version 1.2.7 Final or later. For ImpressCMS versions 1.3.x through 1.3.0, update to version 1.3.1 Final or later.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2012-0987

Affected Products

Impresscms

References · 9

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2012-01/0022.html · Exploit
• 🔥 http://osvdb.org/78143 · Exploit
• http://community.impresscms.org/modules/smartsection/item.php?itemid=579 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-0987 · Security Note
• http://secunia.com/advisories/47448 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/72146 · Note
• http://securityfocus.com/bid/51268 · Note
• https://htbridge.com/advisory/HTB23064 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0987 · Note