CVE

Id
33349  
CVE No.
CVE-2008-3232  
Status
Candidate  
Description
Unrestricted file upload vulnerability in ecrire/images.php in Dotclear 1.2.7.1 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in images.  
Phase
Assigned (20080718)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
363015 33349 CVE-2008-3232 BUGTRAQ:20080415 Dotclear "ecrire/images.php" Arbitrary File Upload Vulnerability  View
363016 33349 CVE-2008-3232 URL:http://www.securityfocus.com/archive/1/archive/1/490865/100/0/threaded  View
363017 33349 CVE-2008-3232 MLIST:[oss-security] 20080714 CVE request: dotclear < 1.2.8  View
363018 33349 CVE-2008-3232 URL:http://www.openwall.com/lists/oss-security/2008/07/14/2  View
363019 33349 CVE-2008-3232 MISC:http://www.dotclear.net/blog/post/2008/04/18/Gestionnaire-de-media-et-types-de-fichiers  View
363020 33349 CVE-2008-3232 CONFIRM:http://www.dotclear.net/blog/post/2008/04/18/Dotclear-128  View
363021 33349 CVE-2008-3232 BID:28787  View
363022 33349 CVE-2008-3232 URL:http://www.securityfocus.com/bid/28787  View
363023 33349 CVE-2008-3232 OSVDB:44441  View
363024 33349 CVE-2008-3232 URL:http://osvdb.org/44441  View
363025 33349 CVE-2008-3232 SECUNIA:29819  View
363026 33349 CVE-2008-3232 URL:http://secunia.com/advisories/29819  View
363027 33349 CVE-2008-3232 XF:dotclear-images-upload-unspecified(44039)  View
363028 33349 CVE-2008-3232 URL:http://xforce.iss.net/xforce/xfdb/44039  View
363029 33349 CVE-2008-3232 XF:dotclear-images-file-upload(41828)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
46262 JVNDB-2008-001572 IBM WebSphere Application Server (WAS) の Wsadmin における情報漏えいの脆弱性 IBM WebSphere Application Server (WAS) の System Management/Repository コンポーネントには Wsadmin において、以前に暗号化したプロパティが暗号化されないことに関連する、情報漏えいの脆弱性が存在します。 CVE-2008-3236 33349 5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001572.html  View