Mura CMS 'FILEID' Parameter Directory Traversal Vulnerability
BID:43499
Info
Mura CMS 'FILEID' Parameter Directory Traversal Vulnerability
| Bugtraq ID: | 43499 |
| Class: | Input Validation Error |
| CVE: |
CVE-2010-3468 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 26 2010 12:00AM |
| Updated: | Sep 26 2010 12:00AM |
| Credit: | Steven Seeley, Rohan Stelling and mr_me |
| Vulnerable: |
Blue River Interactive Group Sava CMS 5.2 Blue River Interactive Group Mura CMS 5.2 Blue River Interactive Group Mura CMS 5.1 Blue River Interactive Group Mura CMS 5.0 |
| Not Vulnerable: |
Blue River Interactive Group Mura CMS 5.2.2809 Blue River Interactive Group Mura CMS 5.1.498 |
Solution / Fix
Mura CMS 'FILEID' Parameter Directory Traversal Vulnerability
Solution:
Vendor updates are available. Please see the references for more information.
Blue River Interactive Group Mura CMS 5.1
Blue River Interactive Group Mura CMS 5.2
Solution:
Vendor updates are available. Please see the references for more information.
Blue River Interactive Group Mura CMS 5.1
-
Blue River Interactive Group Mura 5.1 Security Patch
http://www.getmura.com/tasks/sites/v5/assets/File/mura51SecurityPatch1 .zip
Blue River Interactive Group Mura CMS 5.2
-
Blue River Interactive Group Mura 5.2 Security Patch
http://www.getmura.com/tasks/sites/v5/assets/File/mura52SecurityPatch1 .zip
References
Mura CMS 'FILEID' Parameter Directory Traversal Vulnerability
References:
References:
- Blue River Interactive Group (Blue River)
- Critical Security Patch For Mura CMS (Blue River Interactive Group)