CVE

Id
35849  
CVE No.
CVE-2008-5732  
Status
Candidate  
Description
Unrestricted file upload vulnerability in lib/image_upload.php in KafooeyBlog 1.55b allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file.  
Phase
Assigned (20081226)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
394119 35849 CVE-2008-5732 MILW0RM:7537  View
394120 35849 CVE-2008-5732 URL:http://www.milw0rm.com/exploits/7537  View
394121 35849 CVE-2008-5732 BID:32953  View
394122 35849 CVE-2008-5732 URL:http://www.securityfocus.com/bid/32953  View
394123 35849 CVE-2008-5732 OSVDB:50876  View
394124 35849 CVE-2008-5732 URL:http://osvdb.org/50876  View
394125 35849 CVE-2008-5732 SECUNIA:33223  View
394126 35849 CVE-2008-5732 URL:http://secunia.com/advisories/33223  View
394127 35849 CVE-2008-5732 SREASON:4812  View
394128 35849 CVE-2008-5732 URL:http://securityreason.com/securityalert/4812  View
394129 35849 CVE-2008-5732 XF:kafooeyblog-imageupload-file-upload(47535)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
48465 JVNDB-2008-003775 FreeBSD における権限を取得される脆弱性 FreeBSD には、(1) netgraph および (2) bluetooth ソケットに対して関数ポインタが適切に初期化されないため、権限を取得される脆弱性が存在します。 CVE-2008-5736 35849 7.2 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003775.html  View