PT-2019-13493 · Comsenz · Discuz!Ml

Published 2019-07-18 · Updated 2024-10-04 · CVE-2019-13956

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Discuz!ML versions 3.2 through 3.4

Description The issue allows remote attackers to execute arbitrary PHP code via a modified language cookie. This can be achieved by altering the cookie value, for example, changing 4gH4 0df5 language=en to 4gH4 0df5 language=en'.phpinfo().';. The attack vector involves manipulating the language parameter in the cookie to inject malicious PHP code.

Recommendations For Discuz!ML versions 3.2 through 3.4, consider restricting access to the language cookie or implementing input validation to prevent malicious modifications. As a temporary workaround, monitor server logs for suspicious activity related to the language cookie.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2019-13956

Affected Products

Discuz!Ml

References · 5

• 🔥 http://esoln.net/esoln/blog/2019/06/14/discuzml-v-3-x-code-injection-vulnerability · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-13956 · Security Note
• https://osv.dev/vulnerability/CVE-2019-13956 · Vendor Advisory
• https://twitter.com/rst_cloud/status/1842218492965138524 · Twitter Post
• https://t.me/aptreports/13092 · Telegram Post