CVE-2008-5881
published 2009-01-09CVE-2008-5881: Multiple directory traversal vulnerabilities in playSMS 0.9.3 allow remote attackers to include and execute arbitrary local files via directory traversal…
PriorityP348high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
7.27%
93.6th percentile
Multiple directory traversal vulnerabilities in playSMS 0.9.3 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the (1) gateway_module parameter to plugin/gateway/gnokii/init.php and the (2) themes_module parameter to plugin/themes/default/init.php.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| playsms | playsms | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
GOM Player 2.3.10.5266 - '.fpx' Denial of Service
exploitdb·2017-02-15·CVSS 7.8
CVE-2017-5881 [HIGH] GOM Player 2.3.10.5266 - '.fpx' Denial of Service
GOM Player 2.3.10.5266 - '.fpx' Denial of Service
---
# Exploit Title: GOM Player 2.3.10.5266 - Remote heap corruption (.fpx)
# Date: 2017-02-15
# Exploit Author: Peter Baris
# Exploit link: http://www.saptech-erp.com.au/resources/PoC.zip
# Software Link: http://player.gomlab.com/download.gom?language=eng
# CVE: CVE-2017-5881
# Version: 2.3.10.5266
# Tested on: Windows Server 2008 R2 x64, Windows 7 SP1 x64
POC:
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/41367.zip
Open the malicious fpx file with CTRL+U, served by a webserver:
WinDbg
(864.150): Access violation - code c0000005 (first chance)
First chance exceptions are reported before any exception handling.
This exception may be expected and handled.
eax=092fcde8 ebx=00000000 ecx=41414141 edx
Exploit-DB
PlaySms 0.9.3 - Multiple Local/Remote File Inclusions
exploitdb·2009-01-06
CVE-2009-0103 PlaySms 0.9.3 - Multiple Local/Remote File Inclusions
PlaySms 0.9.3 - Multiple Local/Remote File Inclusions
---
==:RFI/LFI:==
script:playsms 0.9.3
download from:http://downloads.sourceforge.net/playsms/playsms-0.9.3.tar.gz?modtime=1211284086&big_mirror=0
vul1: /plugin/gateway/gnokii/init.php lin 2 , 3;
2 include "$apps_path[plug]/gateway/$gateway_module/config.php";
3 include "$apps_path[plug]/gateway/$gateway_module/fn.php";
vul2: /plugin/themes/default/init.php lin 2 , 3;
2 include $apps_path[themes]."/".$themes_module."/config.php";
3 include $apps_path[themes]."/".$themes_module."/fn.php";
vul3: /lib/function.php lin 4 and...
lin4 include "$apps_path[libs]/fn_auth.php";
xpl:
http://127.0.0.1/path/plugin/gateway/gnokii/init.php?apps_path[plug]=[Rfi]?
http://127.0.0.1/path/plugin/gateway/gnokii/init.php?gateway_module=[Lfi]
ht
No writeups or analysis indexed.
http://secunia.com/advisories/33386http://securityreason.com/securityalert/4888http://www.securityfocus.com/bid/33138https://www.exploit-db.com/exploits/7687http://secunia.com/advisories/33386http://securityreason.com/securityalert/4888http://www.securityfocus.com/bid/33138https://www.exploit-db.com/exploits/7687
2009-01-09
Published