JomSocial Personal Classifieds Plugin Insecure Directory Permissions Vulnerability
BID:42229
Info
JomSocial Personal Classifieds Plugin Insecure Directory Permissions Vulnerability
| Bugtraq ID: | 42229 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Aug 05 2010 12:00AM |
| Updated: | Aug 05 2010 12:00AM |
| Credit: | terratech |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
JomSocial Personal Classifieds Plugin Insecure Directory Permissions Vulnerability
The Personal Classifieds plugin for JomSocial is prone to a security vulnerability because it sets insecure directory permissions.
A local attacker can exploit this issue to obtain sensitive information, manipulate data, or gain escalated privileges.
Versions prior to Personal Classifieds 1.3 are vulnerable.
The Personal Classifieds plugin for JomSocial is prone to a security vulnerability because it sets insecure directory permissions.
A local attacker can exploit this issue to obtain sensitive information, manipulate data, or gain escalated privileges.
Versions prior to Personal Classifieds 1.3 are vulnerable.
Exploit / POC
JomSocial Personal Classifieds Plugin Insecure Directory Permissions Vulnerability
Attackers can exploit this issue using readily available tools.
Attackers can exploit this issue using readily available tools.
Solution / Fix
JomSocial Personal Classifieds Plugin Insecure Directory Permissions Vulnerability
Solution:
Updates are available. Please see the references for details.
Solution:
Updates are available. Please see the references for details.
References
JomSocial Personal Classifieds Plugin Insecure Directory Permissions Vulnerability
References:
References:
- JomSocial Homepage (JomSocial)
- Joomla! Homepage (Joomla!)