Detections
Analytics

e107 BBCode Arbitrary PHP Code Execution

high Nessus Plugin ID 46692

Language:

Synopsis

The remote web server contains a PHP script that allows arbitrary code execution.

Description

The installation of e107 on the remote host allows unauthenticated access to the special '[php]' BBCode, which supports execution of arbitrary PHP code.

An unauthenticated, remote attacker can leverage this to execute arbitrary PHP, subject to the privileges under which the web server operates.

Solution

Disable support for BBCode or upgrade to version 0.7.21 or later.

See Also

http://www.nessus.org/u?8d738c9e

http://www.nessus.org/u?503f4a45

Plugin Details

Severity: High

ID: 46692

File Name: e107_bbcode_php_code_execution.nasl

Version: 1.22

Type: remote

Family: CGI abuses

Published: 5/21/2010

Updated: 6/5/2024

Configuration: Enable thorough checks

Supported Sensors: Nessus

Enable CGI Scanning: true

Risk Information

VPR

Risk Factor: Critical

Score: 9.0

CVSS v2

Risk Factor: High

Base Score: 7.5

Temporal Score: 6.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Information

CPE: cpe:/a:e107:e107

Required KB Items: www/e107

Excluded KB Items: Settings/disable_cgi_scanning

Exploit Available: true

Exploit Ease: Exploits are available

Exploited by Nessus: true

Patch Publication Date: 5/23/2010

Vulnerability Publication Date: 5/19/2010

Exploitable With

Elliot (e107 0.7.20 RCE)

Reference Information

CVE: CVE-2010-2099

BID: 40252

SECUNIA: 39498