CVE

Id
33210  
CVE No.
CVE-2008-3093  
Status
Candidate  
Description
Unrestricted file upload vulnerability in ImperialBB 2.3.5 and earlier allows remote authenticated users to upload and execute arbitrary PHP code by placing a .php filename in the Upload_Avatar parameter and sending the image/gif content type.  
Phase
Assigned (20080709)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
360647 33210 CVE-2008-3093 MILW0RM:6008  View
360648 33210 CVE-2008-3093 URL:http://www.milw0rm.com/exploits/6008  View
360649 33210 CVE-2008-3093 MISC:http://phplizardo.breizh-web.net/blog/2008/07/05/advisory-1-imperialbb  View
360650 33210 CVE-2008-3093 BID:30100  View
360651 33210 CVE-2008-3093 URL:http://www.securityfocus.com/bid/30100  View
360652 33210 CVE-2008-3093 SECUNIA:30939  View
360653 33210 CVE-2008-3093 URL:http://secunia.com/advisories/30939  View
360654 33210 CVE-2008-3093 XF:imperialbb-avatar-file-upload(43608)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
46755 JVNDB-2008-002065 Drupal におけるクロスサイトスクリプティングの脆弱性 Drupal 用 Tinytax モジュール (Tinytax taxonomy block) には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-3097 33210 3.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002065.html  View