CVE

Id
31983  
CVE No.
CVE-2008-1866  
Status
Candidate  
Description
admin/modif_config.php in Blog Pixel Motion (aka PixelMotion) does not require admin authentication, which allows remote authenticated users to upload arbitrary PHP scripts in a ZIP archive, which is written to templateZip/ and then automatically extracted under templates/ for execution via a direct request.  
Phase
Assigned (20080417)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
345036 31983 CVE-2008-1866 MILW0RM:5381  View
345037 31983 CVE-2008-1866 URL:http://www.milw0rm.com/exploits/5381  View
345038 31983 CVE-2008-1866 BID:28646  View
345039 31983 CVE-2008-1866 URL:http://www.securityfocus.com/bid/28646  View
345040 31983 CVE-2008-1866 VUPEN:ADV-2008-1121  View
345041 31983 CVE-2008-1866 URL:http://www.vupen.com/english/advisories/2008/1121/references  View
345042 31983 CVE-2008-1866 XF:blogpixelmotion-modifconfig-file-upload(41670)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
47648 JVNDB-2008-002958 PIGMy-SQL の getdata.php における SQL インジェクションの脆弱性 PIGMy-SQL の getdata.php には、SQL インジェクションの脆弱性が存在します。 CVE-2008-1870 31983 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002958.html  View