CVE

Id
34626  
CVE No.
CVE-2008-4509  
Status
Candidate  
Description
Unrestricted file upload vulnerability in processFiles.php in FOSS Gallery Admin and FOSS Gallery Public 1.0 beta allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the root directory.  
Phase
Assigned (20081009)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
379213 34626 CVE-2008-4509 MILW0RM:6670  View
379214 34626 CVE-2008-4509 URL:http://www.milw0rm.com/exploits/6670  View
379215 34626 CVE-2008-4509 MILW0RM:6674  View
379216 34626 CVE-2008-4509 URL:http://www.milw0rm.com/exploits/6674  View
379217 34626 CVE-2008-4509 MILW0RM:6680  View
379218 34626 CVE-2008-4509 URL:http://www.milw0rm.com/exploits/6680  View
379219 34626 CVE-2008-4509 BID:31574  View
379220 34626 CVE-2008-4509 URL:http://www.securityfocus.com/bid/31574  View
379221 34626 CVE-2008-4509 SREASON:4379  View
379222 34626 CVE-2008-4509 URL:http://securityreason.com/securityalert/4379  View
379223 34626 CVE-2008-4509 XF:fossgallery-multiple-file-upload(45683)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
49632 JVNDB-2008-004942 Phorum の BBcode API モジュールにおけるクロスサイトスクリプティングの脆弱性 Phorum の BBcode API モジュールには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-4513 34626 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004942.html  View