PT-2015-6767 · X2Engine · X2Crm

Simone Quatrini · Published 2015-09-29 · Updated 2018-10-09 · CVE-2015-5074

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions X2Engine X2CRM versions prior to 5.0.9

Description The issue is related to an incomplete blacklist vulnerability in the FileUploadsFilter class. This allows remote authenticated users to execute arbitrary PHP code by uploading a file with a .pht extension.

Recommendations For versions prior to 5.0.9, update to version 5.0.9 or later to resolve the issue. As a temporary workaround, consider restricting file uploads to prevent the execution of arbitrary PHP code.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2015-5074

Affected Products

X2Crm

References · 7

• 🔥 https://github.com/X2Engine/X2CRM/commit/10b72bfe7a1b9694f19a0adef72d85a754d4d3f8#diff-26a90fcab2707d6ef509fccb3588790f · Exploit
• 🔥 https://portcullis-security.com/security-research-and-downloads/security-advisories/cve-2015-5074 · Exploit
• 🔥 https://exploit-db.com/exploits/38323 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-5074 · Security Note
• http://packetstormsecurity.com/files/133717/X2Engine-4.2-Arbitrary-File-Upload.html · Note
• http://securityfocus.com/archive/1/536546/100/0/threaded · Note
• http://seclists.org/fulldisclosure/2015/Sep/92 · Note