CVE

Id
30749  
CVE No.
CVE-2008-0632  
Status
Candidate  
Description
Unrestricted file upload vulnerability in cp_upload_image.php in LightBlog 9.5 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the blog"s root directory.  
Phase
Assigned (20080206)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
327588 30749 CVE-2008-0632 BUGTRAQ:20080201 LightBlog Remote File Upload Vulnerability  View
327589 30749 CVE-2008-0632 URL:http://www.securityfocus.com/archive/1/archive/1/487398/100/0/threaded  View
327590 30749 CVE-2008-0632 MILW0RM:5033  View
327591 30749 CVE-2008-0632 URL:http://www.milw0rm.com/exploits/5033  View
327592 30749 CVE-2008-0632 MISC:http://omni.netsons.org/blog/?p=11  View
327593 30749 CVE-2008-0632 BID:27562  View
327594 30749 CVE-2008-0632 URL:http://www.securityfocus.com/bid/27562  View
327595 30749 CVE-2008-0632 SECUNIA:28734  View
327596 30749 CVE-2008-0632 URL:http://secunia.com/advisories/28734  View
327597 30749 CVE-2008-0632 SREASON:3617  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
48731 JVNDB-2008-004041 Level Platforms, Inc. (LPI) Managed Workplace Service Center における重要な情報を取得される脆弱性 Level Platforms, Inc. (LPI) Managed Workplace Service Center には、重要な情報を取得される脆弱性が存在します。 CVE-2008-0636 30749 5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004041.html  View