PT-2017-7232 · Yeager · Yeager Cms

P. Morimoto · Published 2017-04-24 · Updated 2018-10-09 · CVE-2015-7570

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Yeager CMS version 1.2.1

Description The issue allows remote attackers to trigger outbound requests and enumerate open ports. This is achieved via the dbhost parameter to specific API endpoints, including 'libs/org/adodb lite/tests/test adodb lite.php', 'libs/org/adodb lite/tests/test datadictionary.php', or 'libs/org/adodb lite/tests/test adodb lite sessions.php'.

Recommendations For Yeager CMS version 1.2.1, as a temporary workaround, consider restricting access to the dbhost parameter in the affected API endpoints until a patch is available. Avoid using the dbhost parameter in the specified endpoints to minimize the risk of exploitation.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2015-7570

Affected Products

Yeager Cms

References · 5

• 🔥 https://exploit-db.com/exploits/39436 · Exploit
• 🔥 http://packetstormsecurity.com/files/135716/Yeager-CMS-1.2.1-File-Upload-SQL-Injection-XSS-SSRF.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-7570 · Security Note
• http://seclists.org/fulldisclosure/2016/Feb/44 · Patch
• http://securityfocus.com/archive/1/537493/100/0/threaded · Note