PT-2019-18609 · Php Scripts Mall · Php Scripts Mall Opensource Classified Ads Script

Published 2019-03-20 · Updated 2021-07-21 · CVE-2019-7436

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Opensource Classified Ads Script version 3.2.2

Description The issue concerns a directory traversal vulnerability, which occurs when a direct request is made for a listing of an uploads directory. This could potentially allow unauthorized access to sensitive files.

Recommendations For PHP Scripts Mall Opensource Classified Ads Script version 3.2.2, consider restricting access to the uploads directory to prevent exploitation of the directory traversal issue. As a temporary workaround, limit directory listings and ensure proper access controls are in place for the uploads directory. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2019-7436

Affected Products

Php Scripts Mall Opensource Classified Ads Script

References · 3

• 🔥 https://gkaim.com/cve-2019-7436-vikas-chaudhary · Exploit
• https://osv.dev/vulnerability/CVE-2019-7436 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-7436 · Security Note