CVE

Id
32691  
CVE No.
CVE-2008-2574  
Status
Candidate  
Description
Unrestricted file upload vulnerability in admin/Editor/imgupload.php in FlashBlog 0.31 beta allows remote attackers to execute arbitrary code by uploading a .php file, then accessing it via a direct request to the file in tus_imagenes/.  
Phase
Assigned (20080606)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
353648 32691 CVE-2008-2574 BUGTRAQ:20080529 FlashBlog Remote File Upload Vulnerability  View
353649 32691 CVE-2008-2574 URL:http://www.securityfocus.com/archive/1/archive/1/492738/100/0/threaded  View
353650 32691 CVE-2008-2574 MILW0RM:5728  View
353651 32691 CVE-2008-2574 URL:http://www.milw0rm.com/exploits/5728  View
353652 32691 CVE-2008-2574 MISC:http://www.dumenci.net/web-action/flashblog-beta0.31-remote-file-upload-vulnerability.html  View
353653 32691 CVE-2008-2574 MISC:http://www.flashblog.org  View
353654 32691 CVE-2008-2574 SREASON:3928  View
353655 32691 CVE-2008-2574 URL:http://securityreason.com/securityalert/3928  View
353656 32691 CVE-2008-2574 XF:flashblog-imgupload-file-upload(42820)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
46253 JVNDB-2008-001563 BEA Product Suite の WebLogic Server コンソールおよびサーバログにおける情報漏えいの脆弱性 BEA Product Suite の WebLogic Server コンソールおよびサーバログには、情報漏えいの脆弱性が存在します。 CVE-2008-2578 32691 6.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001563.html  View