CVE

Id
31907  
CVE No.
CVE-2008-1790  
Status
Candidate  
Description
Unrestricted file upload vulnerability in iScripts SocialWare allows remote authenticated administrators to upload arbitrary files via a crafted logo file in the "Manage Settings" functionality. NOTE: remote exploitation is facilitated by a separate SQL injection vulnerability.  
Phase
Assigned (20080415)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
343635 31907 CVE-2008-1790 MILW0RM:5402  View
343636 31907 CVE-2008-1790 URL:http://www.milw0rm.com/exploits/5402  View
343637 31907 CVE-2008-1790 BID:28670  View
343638 31907 CVE-2008-1790 URL:http://www.securityfocus.com/bid/28670  View
343639 31907 CVE-2008-1790 VUPEN:ADV-2008-1137  View
343640 31907 CVE-2008-1790 URL:http://www.vupen.com/english/advisories/2008/1137/references  View
343641 31907 CVE-2008-1790 OSVDB:44327  View
343642 31907 CVE-2008-1790 URL:http://www.osvdb.org/44327  View
343643 31907 CVE-2008-1790 SECUNIA:29725  View
343644 31907 CVE-2008-1790 URL:http://secunia.com/advisories/29725  View
343645 31907 CVE-2008-1790 XF:socialware-managesettings-file-upload(41751)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
46774 JVNDB-2008-002084 Drupal Webform モジュールにおける不特定多数の HTML インジェクションの脆弱性 Webform Drupal モジュールには、複数のクロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-1794 31907 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002084.html  View