PT-2009-5011
CVE-2009-2611
·
تاريخ النشر
2009-07-27
·
تاريخ التحديث
2017-09-19
الوصف من
CVSS 2.0
6.8
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
MyFusion (aka MyF) version 6 Beta
Description
A directory traversal issue exists, allowing remote attackers to include and execute arbitrary local files. This is achieved by exploiting the
settings[locale] parameter with a .. (dot dot) when register globals is enabled.Recommendations
For MyFusion (aka MyF) version 6 Beta, consider disabling the
register globals setting to mitigate the risk of exploitation. Additionally, restrict access to the infusions/last seen users panel/last seen users panel.php file until a patch is available. Avoid using the settings[locale] parameter with untrusted input in the affected file.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾