CVE

Id
20963  
CVE No.
CVE-2006-4859  
Status
Candidate  
Description
Unrestricted file upload vulnerability in contact.html.php in the Contact (com_contact) component in Limbo (aka Lite Mambo) CMS 1.0.4.2L and earlier allows remote attackers to upload PHP code to the images/contact folder via a filename with a double extension in the contact_attach parameter in a contact option in index.php, which bypasses an insufficiently restrictive regular expression.  
Phase
Assigned (20060919)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
198673 20963 CVE-2006-4859 MILW0RM:2370  View
198674 20963 CVE-2006-4859 URL:http://milw0rm.com/exploits/2370  View
198675 20963 CVE-2006-4859 BID:20044  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
59854 JVNDB-2006-002120 Mohammed Mehdi Panjwani Complain Center の loginprocess.asp における SQL インジェクションの脆弱性 Mohammed Mehdi Panjwani Complain Center の loginprocess.asp には、SQL インジェクションの脆弱性が存在します。 CVE-2006-4861 20963 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002120.html  View