CVE

Id
33295  
CVE No.
CVE-2008-3178  
Status
Candidate  
Description
Unrestricted file upload vulnerability in upload_pictures.php in WebXell Editor 0.1.3 allows remote attackers to execute arbitrary code by uploading a .php file with a jpeg content type, then accessing it via a direct request to the file in upload/.  
Phase
Assigned (20080715)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
362451 33295 CVE-2008-3178 MILW0RM:6015  View
362452 33295 CVE-2008-3178 URL:http://www.milw0rm.com/exploits/6015  View
362453 33295 CVE-2008-3178 BID:30117  View
362454 33295 CVE-2008-3178 URL:http://www.securityfocus.com/bid/30117  View
362455 33295 CVE-2008-3178 VUPEN:ADV-2008-2016  View
362456 33295 CVE-2008-3178 URL:http://www.vupen.com/english/advisories/2008/2016/references  View
362457 33295 CVE-2008-3178 SECUNIA:30948  View
362458 33295 CVE-2008-3178 URL:http://secunia.com/advisories/30948  View
362459 33295 CVE-2008-3178 SREASON:3991  View
362460 33295 CVE-2008-3178 URL:http://securityreason.com/securityalert/3991  View
362461 33295 CVE-2008-3178 XF:webxelleditor-upload-file-upload(43596)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
50707 JVNDB-2008-006017 DAP の DAP.exe におけるスタックベースのバッファオーバーフローの脆弱性 Download Accelerator Plus (DAP) の DAP.exe には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2008-3182 33295 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006017.html  View