CVE

Id
20685  
CVE No.
CVE-2006-4581  
Status
Candidate  
Description
Unrestricted file upload vulnerability in The Address Book 1.04e validates the Content-Type header but not the file extension, which allows remote attackers to upload arbitrary PHP scripts.  
Phase
Assigned (20060906)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
195274 20685 CVE-2006-4581 MISC:http://secunia.com/secunia_research/2006-76/advisory/  View
195275 20685 CVE-2006-4581 BID:21870  View
195276 20685 CVE-2006-4581 URL:http://www.securityfocus.com/bid/21870  View
195277 20685 CVE-2006-4581 OSVDB:32560  View
195278 20685 CVE-2006-4581 URL:http://osvdb.org/32560  View
195279 20685 CVE-2006-4581 SECUNIA:21694  View
195280 20685 CVE-2006-4581 URL:http://secunia.com/advisories/21694  View
195281 20685 CVE-2006-4581 XF:theaddressbook-contentheader-file-upload(31250)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58930 JVNDB-2006-001196 FlashChat における PHP リモートファイルインクルージョンの脆弱性 FlashChat には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2006-4583 20685 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001196.html  View