CVE

Id
12237  
CVE No.
CVE-2005-1031  
Status
Candidate  
Description
RUNCMS 1.1A, and possibly other products based on e-Xoops (exoops), when "Allow custom avatar upload" is enabled, does not properly verify uploaded files, which allows remote attackers to upload arbitrary files.  
Phase
Assigned (20050410)  
Votes
None (candidate not yet proposed)  
Comments