Easybrik EasySite 2.3 module path traversal

Summaryinfo

A vulnerability has been found in Easybrik EasySite 2.3 and classified as problematic. This issue affects some unknown processing. Performing a manipulation of the argument module results in path traversal. This vulnerability was named CVE-2008-4155. In addition, an exploit is available.

Detailsinfo

A vulnerability, which was classified as critical, was found in Easybrik EasySite 2.3. This affects an unknown part. The manipulation of the argument module with an unknown input leads to a path traversal vulnerability. CWE is classifying the issue as CWE-22. The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory. This is going to have an impact on confidentiality. The summary by CVE is:

Multiple directory traversal vulnerabilities in EasySite 2.3 allow remote attackers to read arbitrary files or list directories via a .. (dot dot) in the (1) module or (2) action parameter in (a) www/index.php; the (3) module, (4) ss_module, or (5) ss_action parameter in (b) modules/Module/index.php or (c) modules/Themes/index.php; or the (6) module parameter in (d) inc/vmenu.php.

The weakness was presented 09/19/2008 by rgod (Website). It is possible to read the advisory at milw0rm.com. This vulnerability is uniquely identified as CVE-2008-4155 since 09/19/2008. The exploitability is told to be easy. It is possible to initiate the attack remotely. No form of authentication is needed for exploitation. Technical details and a public exploit are known. The attack technique deployed by this issue is T1006 according to MITRE ATT&CK.

The exploit is shared for download at exploit-db.com. It is declared as proof-of-concept.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the databases at X-Force (44599), Exploit-DB (6288), SecurityFocus (BID 30784†) and Secunia (SA31570†). Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Vendor

• Easybrik

Name

• EasySite

Version

• 2.3

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion