PT-2019-19777 · Sdcms · Sdcms

Published 2019-03-11 · Updated 2019-03-11 · CVE-2019-9651

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SDCMS version 1.7

Description An issue in the themecontroller.php file allows for PHP code execution due to insufficient filtering in the check bad() function. This is because the filtering does not strictly block all dangerous PHP functions, such as system, and file extensions like ".PHP" are not blocked, while ".php" is.

Recommendations For SDCMS version 1.7, as a temporary workaround, consider disabling the check bad() function or restricting its use until a patch is available. Additionally, restrict access to the themecontroller.php file to minimize the risk of exploitation. Avoid using the system function in the affected controller until the issue is resolved.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2019-9651

Affected Products

Sdcms

References · 3

• 🔥 http://iwantacve.cn/index.php/archives/155 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-9651 · Security Note
• https://osv.dev/vulnerability/CVE-2019-9651 · Vendor Advisory