CVE

Id
21120  
CVE No.
CVE-2006-5016  
Status
Candidate  
Description
Unrestricted file upload vulnerability in admin/x_image.php in Szava Gyula and Csaba Tamas e-Vision CMS, probably 1.0, allows remote attackers to upload arbitrary files to the /imagebank directory.  
Phase
Assigned (20060927)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
200491 21120 CVE-2006-5016 BUGTRAQ:20060922 E-Vision CMS Multible Remote injections  View
200492 21120 CVE-2006-5016 URL:http://www.securityfocus.com/archive/1/archive/1/446706/100/0/threaded  View
200493 21120 CVE-2006-5016 BID:21047  View
200494 21120 CVE-2006-5016 URL:http://www.securityfocus.com/bid/21047  View
200495 21120 CVE-2006-5016 VUPEN:ADV-2006-3764  View
200496 21120 CVE-2006-5016 URL:http://www.vupen.com/english/advisories/2006/3764  View
200497 21120 CVE-2006-5016 SECUNIA:21969  View
200498 21120 CVE-2006-5016 URL:http://secunia.com/advisories/21969  View
200499 21120 CVE-2006-5016 SREASON:1642  View
200500 21120 CVE-2006-5016 URL:http://securityreason.com/securityalert/1642  View
200501 21120 CVE-2006-5016 XF:evisioncms-ximage-file-upload(29124)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
59051 JVNDB-2006-001317 ContentKeeper におけるパスワードを取得される脆弱性 ContentKeeper は、cgi-bin/ck/changepw.cgi 内の INPUT 要素に平文でパスワードを配置するため、パスワードを取得される脆弱性が存在します。 CVE-2006-5018 21120 4 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001317.html  View