CVE

Id
24454  
CVE No.
CVE-2007-1097  
Status
Candidate  
Description
Unrestricted file upload vulnerability in the onAttachFiles function in the upload tool (inc/lib/attachment.lib.php) in Wiclear before 0.11.1 allows remote attackers to upload and execute arbitrary PHP code via unspecified vectors related to filename validation. NOTE: some details were obtained from third party information.  
Phase
Assigned (20070226)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
241064 24454 CVE-2007-1097 CONFIRM:http://wiclear.free.fr/?Download  View
241065 24454 CVE-2007-1097 VUPEN:ADV-2007-0792  View
241066 24454 CVE-2007-1097 URL:http://www.vupen.com/english/advisories/2007/0792  View
241067 24454 CVE-2007-1097 OSVDB:33598  View
241068 24454 CVE-2007-1097 URL:http://osvdb.org/33598  View
241069 24454 CVE-2007-1097 SECUNIA:24286  View
241070 24454 CVE-2007-1097 URL:http://secunia.com/advisories/24286  View
241071 24454 CVE-2007-1097 XF:wiclear-onattachfiles-file-upload(32757)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
54728 JVNDB-2007-003420 Dropbear SSH クライアントの dbclient における中間者攻撃を実行される脆弱性 Dropbear SSH クライアントの dbclient は、ホスト鍵が一致しない場合、ユーザに十分に警告しないため、中間者攻撃を実行される脆弱性が存在します。 CVE-2007-1099 24454 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003420.html  View