CVE-2008-2650 PoC — CMSimple index.php 目录遍历和输入验证错误漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2008/CVE-2008-2650.yaml

Associated Vulnerability

Title:CMSimple index.php 目录遍历和输入验证错误漏洞 (CVE-2008-2650)
Description:CMSimple是丹麦软件开发者Peter Andreas Harteg所研发的一套基于PHP的小型网站内容管理工具。该工具支持所见即所得编辑器、文件自动备份和多种语言等。 CMSimple的index.php脚本中没有正确地过滤对sl参数的输入便用于包含本地文件；index.php脚本没有正确地限制对登录用户的访问，可能导致上传任意文件并执行任意PHP代码。成功利用这些漏洞要求打开了register_globals。

Description

CMSimple 3.1 is susceptible to local file inclusion via cmsimple/cms.php when register_globals is enabled which allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the sl parameter to index.php. NOTE: this can be leveraged for remote file execution by including adm.php and then invoking the upload action. NOTE: on 20080601, the vendor patched 3.1 without changing the version number.

File Snapshot


 id: CVE-2008-2650

info:
  name: CMSimple 3.1 - Local File Inclusion
  author: pussycat0x
  severity

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!