CVE

Id
24909  
CVE No.
CVE-2007-1552  
Status
Candidate  
Description
Unrestricted file upload vulnerability in usercp.php in MetaForum 0.513 Beta restricts file types based on the MIME type in the Content-type HTTP header, which allows remote attackers to upload and execute arbitrary scripts via an image MIME type with a filename containing an executable extension such as .php.  
Phase
Assigned (20070320)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
247062 24909 CVE-2007-1552 BUGTRAQ:20070318 MetaForum <= 0.513 Beta - Remote file upload Vulnerability  View
247063 24909 CVE-2007-1552 URL:http://www.securityfocus.com/archive/1/archive/1/463178/100/0/threaded  View
247064 24909 CVE-2007-1552 MILW0RM:3516  View
247065 24909 CVE-2007-1552 URL:http://www.milw0rm.com/exploits/3516  View
247066 24909 CVE-2007-1552 MISC:http://www.aeroxteam.fr/exploit-MetaForum-0.513b.txt  View
247067 24909 CVE-2007-1552 BID:23032  View
247068 24909 CVE-2007-1552 URL:http://www.securityfocus.com/bid/23032  View
247069 24909 CVE-2007-1552 OSVDB:34523  View
247070 24909 CVE-2007-1552 URL:http://osvdb.org/34523  View
247071 24909 CVE-2007-1552 SREASON:2454  View
247072 24909 CVE-2007-1552 URL:http://securityreason.com/securityalert/2454  View
247073 24909 CVE-2007-1552 XF:metaforum-mime-file-upload(33097)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53026 JVNDB-2007-001718 Guestbara の admin/configuration.php における任意の PHP コードを挿入される脆弱性 Guestbara の admin/configuration.php には、任意の PHP コードを config.php に挿入される脆弱性が存在します。 CVE-2007-1554 24909 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001718.html  View