CVE

Id
19712  
CVE No.
CVE-2006-3608  
Status
Candidate  
Description
The Gallery module in Simone Vellei Flatnuke 2.5.7 and earlier, when Gallery uploads are enabled, does not restrict the extensions of uploaded files that begin with a GIF header, which allows remote authenticated users to execute arbitrary PHP code via an uploaded .php file.  
Phase
Assigned (20060714)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
178556 19712 CVE-2006-3608 BUGTRAQ:20060713 flatnuke <= 2.5.7 arbitrary php file upload  View
178557 19712 CVE-2006-3608 URL:http://www.securityfocus.com/archive/1/archive/1/439975/100/0/threaded  View
178558 19712 CVE-2006-3608 BUGTRAQ:20060807 Re: flatnuke <= 2.5.7 arbitrary php file upload  View
178559 19712 CVE-2006-3608 URL:http://www.securityfocus.com/archive/1/archive/1/442421/100/0/threaded  View
178560 19712 CVE-2006-3608 MISC:http://retrogod.altervista.org/flatnuke257_adv.html  View
178561 19712 CVE-2006-3608 BID:18966  View
178562 19712 CVE-2006-3608 URL:http://www.securityfocus.com/bid/18966  View
178563 19712 CVE-2006-3608 SECTRACK:1016499  View
178564 19712 CVE-2006-3608 URL:http://securitytracker.com/id?1016499  View
178565 19712 CVE-2006-3608 SECUNIA:21051  View
178566 19712 CVE-2006-3608 URL:http://secunia.com/advisories/21051  View
178567 19712 CVE-2006-3608 XF:flatnuke-gallery-code-execution(27731)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60501 JVNDB-2006-002767 Orbitcoders OrbitMATRIX の index.php における重要な情報を取得される脆弱性 Orbitcoders OrbitMATRIX の index.php には、重要な情報 (データベーススキーマの一部) を取得される脆弱性が存在します。 CVE-2006-3610 19712 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002767.html  View