CVE

Id
24612  
CVE No.
CVE-2007-1255  
Status
Candidate  
Description
Unrestricted file upload vulnerability in admin.bbcode.php in Connectix Boards 0.7 and earlier allows remote authenticated administrators to execute arbitrary PHP code by uploading a crafted GIF smiley image with a .php extension via the uploadimage parameter to admin.php, which can be later accessed via a direct request for the file in smileys/. NOTE: this can be leveraged with a separate SQL injection issue for remote unauthenticated attacks.  
Phase
Assigned (20070303)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
242821 24612 CVE-2007-1255 BUGTRAQ:20070221 Connectix Boards <= 0.7 (p_skin) Multiple Vulnerabilities Exploit  View
242822 24612 CVE-2007-1255 URL:http://www.securityfocus.com/archive/1/archive/1/460947/100/0/threaded  View
242823 24612 CVE-2007-1255 MILW0RM:3352  View
242824 24612 CVE-2007-1255 URL:http://milw0rm.com/exploits/3352  View
242825 24612 CVE-2007-1255 OSVDB:33538  View
242826 24612 CVE-2007-1255 URL:http://osvdb.org/33538  View
242827 24612 CVE-2007-1255 SECUNIA:24255  View
242828 24612 CVE-2007-1255 URL:http://secunia.com/advisories/24255  View
242829 24612 CVE-2007-1255 SREASON:2364  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51521 JVNDB-2007-000183 Cisco Catalyst 6000,6500 および Cisco 7600 シリーズ対応の NAM における脆弱性 Cisco Catalyst 6000,6500 シリーズおよび Cisco 7600 シリーズ対応の Network Analysis Module (NAM) には、NAM 自身の IP アドレスに偽装した SNMP パケットの処理に不備が存在するため、デバイスを完全に制御されてしまう脆弱性が存在します。 CVE-2007-1257 24612 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000183.html  View