PT-2019-9054 · Damicms · Damicms

Published 2019-07-10 · Updated 2019-07-17 · CVE-2018-14831

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions DamiCMS version 6.0.0

Description The issue allows remote authenticated administrators to read any files on the server by crafting a specific URI, /admin.php?s=Tpl/Add/id/. This is an arbitrary file read vulnerability.

Recommendations For DamiCMS version 6.0.0, consider restricting access to the /admin.php?s=Tpl/Add/id/ endpoint until a patch is available. As a temporary workaround, limit the privileges of administrators to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2018-14831

Affected Products

Damicms

References · 3

• 🔥 https://gist.github.com/feric/98180bad0a73716e143ff8dc03fda12f · Exploit
• https://osv.dev/vulnerability/CVE-2018-14831 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-14831 · Security Note