CVE

Id
27289  
CVE No.
CVE-2007-3932  
Status
Candidate  
Description
uploadimg.php in the Expose RC35 and earlier (com_expose) component for Joomla! sends an error message but does not exit when it detects an attempt to upload a non-JPEG file, which allows remote attackers to upload and execute arbitrary PHP code in the img/ folder.  
Phase
Assigned (20070720)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
280367 27289 CVE-2007-3932 MILW0RM:4194  View
280368 27289 CVE-2007-3932 URL:http://www.milw0rm.com/exploits/4194  View
280369 27289 CVE-2007-3932 VIM:20070718 Confirm: Joomla Component Expose <= RC35 Remote File Upload Vulnerability  View
280370 27289 CVE-2007-3932 URL:http://www.attrition.org/pipermail/vim/2007-July/001717.html  View
280371 27289 CVE-2007-3932 BID:24958  View
280372 27289 CVE-2007-3932 URL:http://www.securityfocus.com/bid/24958  View
280373 27289 CVE-2007-3932 OSVDB:41262  View
280374 27289 CVE-2007-3932 URL:http://osvdb.org/41262  View
280375 27289 CVE-2007-3932 XF:expose-uploadimg-file-upload(35488)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53695 JVNDB-2007-002387 BBS E-Market の postscript/postscript.php における PHP リモートファイルインクルージョンの脆弱性 BBS E-Market の postscript/postscript.php には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2007-3934 27289 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002387.html  View