CVE
- Id
- 13163
- CVE No.
- CVE-2005-1957
- Status
- Candidate
- Description
- mtnpeak.net File Upload Manager does not properly check user authentication for certain actions, which allows remote attackers to provide a modified base64-encoded file parameter and (1) read arbitrary files via the "view" action or (2) delete arbitrary files via the del action.
- Phase
- Assigned (20050614)
- Votes
- None (candidate not yet proposed)
- Comments