CVE

Id
32105  
CVE No.
CVE-2008-1988  
Status
Candidate  
Description
Unrestricted file upload vulnerability in the file_upload function in core/misc.class.php in EncapsGallery 2.0.2 allows remote authenticated administrators to upload and execute arbitrary PHP files by uploading a file with an executable extension, then accessing it via a direct request to the file in the rwx_gallery directory. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.  
Phase
Assigned (20080427)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
346550 32105 CVE-2008-1988 BID:28887  View
346551 32105 CVE-2008-1988 URL:http://www.securityfocus.com/bid/28887  View
346552 32105 CVE-2008-1988 SECUNIA:29824  View
346553 32105 CVE-2008-1988 URL:http://secunia.com/advisories/29824  View
346554 32105 CVE-2008-1988 XF:encapsgallery-miscclass-file-upload(41949)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
47699 JVNDB-2008-003009 Acidcat CMS における制限を回避される脆弱性 Acidcat CMS は、(1) default_mail_aspemail.asp、(2) default_mail_cdosys.asp または (3) default_mail_jmail.asp へのアクセスを制限しないため、制限を回避される、および変更された From、FromName および To フィールドを含む電子メールを中継される脆弱性が存在します。 CVE-2008-1992 32105 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003009.html  View