CVE

Id
28174  
CVE No.
CVE-2007-4817  
Status
Candidate  
Description
Unrestricted file upload vulnerability in the Restaurante (com_restaurante) component for Joomla! allows remote attackers to upload and execute arbitrary PHP code via an upload action specifying a filename with a double extension such as .php.jpg, which creates an accessible file under img_original/.  
Phase
Assigned (20070911)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
292330 28174 CVE-2007-4817 MILW0RM:4383  View
292331 28174 CVE-2007-4817 URL:http://www.milw0rm.com/exploits/4383  View
292332 28174 CVE-2007-4817 MLIST:[VIM] 20070911 MIL 4383  View
292333 28174 CVE-2007-4817 URL:http://www.attrition.org/pipermail/vim/2007-September/001779.html  View
292334 28174 CVE-2007-4817 BID:25612  View
292335 28174 CVE-2007-4817 URL:http://www.securityfocus.com/bid/25612  View
292336 28174 CVE-2007-4817 VUPEN:ADV-2007-3139  View
292337 28174 CVE-2007-4817 URL:http://www.vupen.com/english/advisories/2007/3139  View
292338 28174 CVE-2007-4817 SECUNIA:26756  View
292339 28174 CVE-2007-4817 URL:http://secunia.com/advisories/26756  View
292340 28174 CVE-2007-4817 XF:comprestaurante-index-file-upload(36538)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57385 JVNDB-2007-006077 Txx CMS におけるクロスサイトスクリプティングの脆弱性 Txx CMS には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-4819 28174 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-006077.html  View