PT-2018-13760 · Monstra · Monstra Cms

Xiaohuihui1113 · Published 2018-09-18 · Updated 2018-11-19 · CVE-2018-16819

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Monstra CMS version 3.0.4

Description The issue concerns arbitrary file deletion in Monstra CMS. An attacker can exploit this by sending a request to the "admin/index.php" endpoint with specific parameters, including id, path, and delete file. The path parameter can be manipulated using directory traversal characters (../) to target files outside the intended directory, and the delete file parameter is used to specify the file to be deleted.

Recommendations For Monstra CMS version 3.0.4, consider restricting access to the "admin/index.php" endpoint, specifically the file deletion functionality, until a fix is available. As a temporary workaround, avoid using the delete file parameter in requests to the "admin/index.php" endpoint with id=filesmanager.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2018-16819

Affected Products

Monstra Cms

References · 4

• 🔥 https://github.com/monstra-cms/monstra/issues/456 · Exploit
• 🔥 http://blog.51cto.com/13770310/2173956 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-16819 · Security Note
• https://osv.dev/vulnerability/CVE-2018-16819 · Vendor Advisory