CVE

Id
22442  
CVE No.
CVE-2006-6338  
Status
Candidate  
Description
Unrestricted file upload vulnerability in upload/index.php in deV!L`z Clanportal (DZCP) before 1.3.6.1 allows remote attackers to upload and execute arbitrary .php files by embedding PHP code in a JPEG or GIF file that is uploaded to inc/images/uploads/userpics/.  
Phase
Assigned (20061206)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
216872 22442 CVE-2006-6338 BUGTRAQ:20061201 deV!L`z Clanportal - Arbitrary File Upload [061124b]  View
216873 22442 CVE-2006-6338 URL:http://www.securityfocus.com/archive/1/archive/1/453178/100/0/threaded  View
216874 22442 CVE-2006-6338 FULLDISC:20061201 deV!L`z Clanportal - Arbitrary File Upload [061124b]  View
216875 22442 CVE-2006-6338 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051022.html  View
216876 22442 CVE-2006-6338 BID:21389  View
216877 22442 CVE-2006-6338 URL:http://www.securityfocus.com/bid/21389  View
216878 22442 CVE-2006-6338 VUPEN:ADV-2006-4821  View
216879 22442 CVE-2006-6338 URL:http://www.vupen.com/english/advisories/2006/4821  View
216880 22442 CVE-2006-6338 SECUNIA:23194  View
216881 22442 CVE-2006-6338 URL:http://secunia.com/advisories/23194  View
216882 22442 CVE-2006-6338 XF:dzcp-index-file-upload(30653)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60246 JVNDB-2006-002512 nVIDIA nView の keystone.exe におけるサービス運用妨害 (DoS) の脆弱性 nVIDIA nView の keystone.exe には、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2006-6340 22442 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002512.html  View