CVE-2014-125137
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk54th percentile - higher than 54% of all known CVEs
Summary
C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engine through 3.0.0 contain a local file inclusion vulnerability in the run parameter of admin/task.php. Authenticated administrators can supply directory traversal sequences in the run parameter to include and disclose local files readable by the web server.
Risk Assessment
Administrators can disclose sensitive system files, leading to information leakage and potential further exploitation. This may compromise the security of the entire system.
Recommendation
Update the software to a version later than those listed. Until then, restrict access to admin/task.php and monitor for unusual requests with the run parameter.
Other vulnerabilities in qEngine CMS, Kemana Directory, Cart Engine
See all- CVE-2014-125138High
qEngine CMS, Kemana Directory, and Cart Engine contain an unrestricted file upload vulnerability in administrative image fields. Editor-role users can upload PHP scripts via the page_image or cat_image parameters to the web-accessible /public/image directory and request them to execute code on the server.
- CVE-2014-125136Medium
C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engine through 3.0.0 contain an information disclosure vulnerability that exposes database backups in the web-accessible /admin/backup directory. Unauthenticated attackers can list the directory or guess date-based names like 'Full Backup YYYYMMDD.sql' to download dumps containing user records and administrator password hashes.
Original NVD description (English source)
C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engine through 3.0.0 contain a local file inclusion vulnerability in the run parameter of admin/task.php. Authenticated administrators can supply directory traversal sequences in the run parameter to include and disclose local files readable by the web server.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS