7.5

CVE-2010-4335

Exploit
The _validatePost function in libs/controller/components/security.php in CakePHP 1.3.x through 1.3.5 and 1.2.8 allows remote attackers to modify the internal Cake cache and execute arbitrary code via a crafted data[_Token][fields] value that is processed by the unserialize function, as demonstrated by modifying the file_map cache to execute arbitrary local files.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cakefoundation ≫ Cakephp Version 1.3.0
Cakephp ≫ Cakephp Version 1.2.8
Cakephp ≫ Cakephp Version 1.3 Update dev
Cakephp ≫ Cakephp Version 1.3.0 Update alpha
Cakephp ≫ Cakephp Version 1.3.0 Update beta
Cakephp ≫ Cakephp Version 1.3.0 Update rc1
Cakephp ≫ Cakephp Version 1.3.0 Update rc2
Cakephp ≫ Cakephp Version 1.3.0 Update rc3
Cakephp ≫ Cakephp Version 1.3.0 Update rc4
Cakephp ≫ Cakephp Version 1.3.1
Cakephp ≫ Cakephp Version 1.3.2
Cakephp ≫ Cakephp Version 1.3.3
Cakephp ≫ Cakephp Version 1.3.4
Cakephp ≫ Cakephp Version 1.3.5
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 55.2% 0.989
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://malloc.im/CakePHP-unserialize.txt
Exploit
http://packetstormsecurity.org/files/view/95847/burnedcake.py.txt
Exploit
http://secunia.com/advisories/42211
Vendor Advisory
http://securityreason.com/securityalert/8026
http://www.exploit-db.com/exploits/16011
http://www.osvdb.org/69352
https://github.com/cakephp/cakephp/commit/e431e86aa4301ced4273dc7919b59362cbb353cb
Patch