JomSocial Profile Designer Plugin Insecure Directory Permissions Vulnerability
BID:42232
Info
JomSocial Profile Designer Plugin Insecure Directory Permissions Vulnerability
| Bugtraq ID: | 42232 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Aug 05 2010 12:00AM |
| Updated: | Aug 05 2010 12:00AM |
| Credit: | Reported by the vendor |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
JomSocial Profile Designer Plugin Insecure Directory Permissions Vulnerability
The Profile Designer plugin for JomSocial is prone to a security vulnerability because it sets insecure directory permissions.
A local attacker can exploit this issue to obtain sensitive information, manipulate data, or gain escalated privileges.
Versions prior to Profile Designer 1.3 are vulnerable.
The Profile Designer plugin for JomSocial is prone to a security vulnerability because it sets insecure directory permissions.
A local attacker can exploit this issue to obtain sensitive information, manipulate data, or gain escalated privileges.
Versions prior to Profile Designer 1.3 are vulnerable.
Exploit / POC
JomSocial Profile Designer Plugin Insecure Directory Permissions Vulnerability
Attackers can exploit this issue using readily available tools.
Attackers can exploit this issue using readily available tools.
Solution / Fix
JomSocial Profile Designer Plugin Insecure Directory Permissions Vulnerability
Solution:
Updates are available. Please see the references for details.
Solution:
Updates are available. Please see the references for details.
References
JomSocial Profile Designer Plugin Insecure Directory Permissions Vulnerability
References:
References:
- JomSocial Homepage (JomSocial)
- Joomla! Homepage (Joomla!)