CVE

Id
26760  
CVE No.
CVE-2007-3403  
Status
Candidate  
Description
Unrestricted file upload vulnerability in upload.php in dreamLog (aka dreamblog) 0.5 allows remote attackers to upload and execute arbitrary PHP code in uploads/images/ via the uploadedFile[] parameter.  
Phase
Assigned (20070626)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
272698 26760 CVE-2007-3403 MILW0RM:4106  View
272699 26760 CVE-2007-3403 URL:http://www.milw0rm.com/exploits/4106  View
272700 26760 CVE-2007-3403 BID:24639  View
272701 26760 CVE-2007-3403 URL:http://www.securityfocus.com/bid/24639  View
272702 26760 CVE-2007-3403 VUPEN:ADV-2007-2326  View
272703 26760 CVE-2007-3403 URL:http://www.vupen.com/english/advisories/2007/2326  View
272704 26760 CVE-2007-3403 OSVDB:45385  View
272705 26760 CVE-2007-3403 URL:http://osvdb.org/45385  View
272706 26760 CVE-2007-3403 XF:dreamlog-upload-file-upload(35054)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
55352 JVNDB-2007-004044 Lebisoft zdefter の defter_yaz.asp におけるクロスサイトスクリプティングの脆弱性 Lebisoft zdefter の defter_yaz.asp には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-3405 26760 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004044.html  View