CVE-2009-4088

Multiple directory traversal vulnerabilities in telepark.wiki 2.4.23 and earlier allow remote attackers to read arbitrary files via directory traversal sequences in the css parameter to (1) getjs.php and (2) getcsslocal.php; and include and execute arbitrary local files via the (3) group parameter to upload.php.

CVSS v2.0 6.8 MEDIUM

6.8^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://secunia.com/advisories/37391	Vendor Advisory
http://www.osvdb.org/60216
http://www.osvdb.org/60218
http://www.osvdb.org/60217
http://blog.telepark.com/telepark-web-software/2009/11/09/telepark-wiki-security-fixes/	Patch
http://packetstormsecurity.org/0911-exploits/Telepark-fixes-nov09-2.txt	Exploit
http://www.exploit-db.com/exploits/9483
https://exchange.xforce.ibmcloud.com/vulnerabilities/54327

Advertisement

Configurations

Configuration 1 (hide)

cpe:2.3:a:telepark:telepark.wiki:*:*:*:*:*:*:*:*

Information

Published : 2009-11-29 05:07

Updated : 2017-08-16 18:31

NVD link : CVE-2009-4088

Mitre link : CVE-2009-4088

JSON object : View

CWE

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Advertisement

Products Affected

telepark

telepark.wiki

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://secunia.com/advisories/37391", "name": "37391", "tags": ["Vendor Advisory"], "refsource": "SECUNIA"}, {"url": "http://www.osvdb.org/60216", "name": "60216", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/60218", "name": "60218", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/60217", "name": "60217", "tags": [], "refsource": "OSVDB"}, {"url": "http://blog.telepark.com/telepark-web-software/2009/11/09/telepark-wiki-security-fixes/", "name": "http://blog.telepark.com/telepark-web-software/2009/11/09/telepark-wiki-security-fixes/", "tags": ["Patch"], "refsource": "CONFIRM"}, {"url": "http://packetstormsecurity.org/0911-exploits/Telepark-fixes-nov09-2.txt", "name": "http://packetstormsecurity.org/0911-exploits/Telepark-fixes-nov09-2.txt", "tags": ["Exploit"], "refsource": "MISC"}, {"url": "http://www.exploit-db.com/exploits/9483", "name": "9483", "tags": [], "refsource": "EXPLOIT-DB"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/54327", "name": "teleparkwiki-multiple-file-include(54327)", "tags": [], "refsource": "XF"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Multiple directory traversal vulnerabilities in telepark.wiki 2.4.23 and earlier allow remote attackers to read arbitrary files via directory traversal sequences in the css parameter to (1) getjs.php and (2) getcsslocal.php; and include and execute arbitrary local files via the (3) group parameter to upload.php."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-22"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2009-4088", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "severity": "MEDIUM", "impactScore": 6.4, "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2009-11-29T13:07Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:telepark:telepark.wiki:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "2.4.23"}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2017-08-17T01:31Z"}