Fleetco Fleet Maintenance Management up to 1.2 Content-Type unrestricted upload

Summaryinfo

A vulnerability classified as critical has been found in Fleetco Fleet Maintenance Management up to 1.2. Impacted is an unknown function. This manipulation as part of Content-Type causes unrestricted upload. This vulnerability appears as CVE-2018-19798. The attack may be initiated remotely. In addition, an exploit is available.

Detailsinfo

A vulnerability was found in Fleetco Fleet Maintenance Management up to 1.2. It has been declared as critical. Affected by this vulnerability is some unknown processing. The manipulation as part of a Content-Type leads to a unrestricted upload vulnerability. The CWE definition for the vulnerability is CWE-434. The product allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

Fleetco Fleet Maintenance Management (FMM) 1.2 and earlier allows uploading an arbitrary ".php" file with the application/x-php Content-Type to the accidents_add.php?submit=1 URI, as demonstrated by the value_Images_1 field, which leads to remote command execution on the remote server. Any authenticated user can exploit this.

The weakness was presented 03/02/2020 as EDB-ID 45927 as not defined exploit (Exploit-DB). The advisory is shared at exploit-db.com. This vulnerability is known as CVE-2018-19798 since 12/03/2018. The exploitation appears to be easy. The attack can be launched remotely. Required for exploitation is a single authentication. Technical details are unknown but a public exploit is available. MITRE ATT&CK project uses the attack technique T1608.002 for this issue.

After immediately, there has been an exploit disclosed. It is possible to download the exploit at exploit-db.com. It is declared as proof-of-concept.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at Exploit-DB (45927). Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Vendor

• Fleetco

Name

• Fleet Maintenance Management

Version

• 1.0
• 1.1
• 1.2

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion