PT-2019-15708 · Fudforum · Fudforum

Liquidsky · Published 2019-11-12 · Updated 2019-11-15 · CVE-2019-18873

Positive Technologies (AI Summary)

CVSS v3.1

9.0

Critical

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FUDForum version 3.0.9

Description The issue allows for Stored XSS via the User-Agent HTTP header, potentially resulting in remote code execution. An attacker can compromise the system by using a user account and sending a GET request. When an admin views user information under "User Manager" in the control panel, the malicious payload will execute, enabling the writing of PHP files to the web root and execution of code on the remote server. The problem is located in the admsession.php and admuser.php files.

Recommendations For FUDForum version 3.0.9, consider disabling the User-Agent HTTP header processing in admsession.php and admuser.php as a temporary workaround until a patch is available. Restrict access to the "User Manager" section in the control panel to minimize the risk of exploitation. Avoid using the User-Agent header in GET requests to the affected system until the issue is resolved.

Exploit

Fix

RCE

OS Command Injection

XSS

Weakness Enumeration

CWE-78

CWE-79

Related Identifiers

CVE-2019-18873

Affected Products

Fudforum

References · 6

• 🔥 https://github.com/fuzzlove/FUDforum-XSS-RCE · Exploit
• 🔥 https://exploit-db.com/exploits/47650 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-18873 · Security Note
• https://osv.dev/vulnerability/CVE-2019-18873 · Vendor Advisory
• https://sourceforge.net/p/fudforum/code/6321 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18873 · Note