A directory traversal and local file inclusion vulnerability in FPProducerInternetServer.exe in Ricoh MarcomCentral, formerly PTI Marketing, FusionPro VDP before 10.0 allows a remote attacker to list or enumerate sensitive contents of files. Furthermore, this could allow for privilege escalation by dumping the local machine's SAM and SYSTEM database files, and possibly remote code execution.
References
| Link | Resource |
|---|---|
| https://packetstormsecurity.com/files/151963/MarcomCentral-FusionPro-VDP-Creator-Directory-Traversal.html | Exploit Third Party Advisory VDB Entry |
| https://www.exploit-db.com/exploits/46494 | Exploit Third Party Advisory VDB Entry |
| https://packetstormsecurity.com/files/151963/MarcomCentral-FusionPro-VDP-Creator-Directory-Traversal.html | Exploit Third Party Advisory VDB Entry |
| https://www.exploit-db.com/exploits/46494 | Exploit Third Party Advisory VDB Entry |
Configurations
History
21 Nov 2024, 04:48
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://packetstormsecurity.com/files/151963/MarcomCentral-FusionPro-VDP-Creator-Directory-Traversal.html - Exploit, Third Party Advisory, VDB Entry | |
| References | () https://www.exploit-db.com/exploits/46494 - Exploit, Third Party Advisory, VDB Entry |
Information
Published : 2019-12-31 17:15
Updated : 2024-11-21 04:48
NVD link : CVE-2019-7751
Mitre link : CVE-2019-7751
CVE.ORG link : CVE-2019-7751
JSON object : View
Products Affected
ricoh
- fusionpro_vdp
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')