CVE

Id
33709  
CVE No.
CVE-2008-3592  
Status
Candidate  
Description
Unrestricted file upload vulnerability in the File Manager in the admin panel in Twentyone Degrees Symphony 1.7.01 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension to a directory specified in the destination parameter, then accessing the uploaded file via a direct request, as demonstrated using workspace/masters/.  
Phase
Assigned (20080811)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
367085 33709 CVE-2008-3592 MILW0RM:6177  View
367086 33709 CVE-2008-3592 URL:http://www.milw0rm.com/exploits/6177  View
367087 33709 CVE-2008-3592 CONFIRM:http://overture21.com/forum/comments.php?DiscussionID=1823  View
367088 33709 CVE-2008-3592 SECUNIA:31293  View
367089 33709 CVE-2008-3592 URL:http://secunia.com/advisories/31293  View
367090 33709 CVE-2008-3592 SREASON:4137  View
367091 33709 CVE-2008-3592 URL:http://securityreason.com/securityalert/4137  View
367092 33709 CVE-2008-3592 XF:symphony-file-upload(44432)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
49438 JVNDB-2008-004748 Harmoni におけるクロスサイトスクリプティングの脆弱性 Harmoni には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-3596 33709 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004748.html  View