CVE

Id
36201  
CVE No.
CVE-2008-6084  
Status
Candidate  
Description
Unrestricted file upload vulnerability in pages/download.php in Iamma Simple Gallery 1.0 and 2.0 allows remote attackers to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the file in the uploads directory.  
Phase
Assigned (20090205)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
396619 36201 CVE-2008-6084 MILW0RM:6803  View
396620 36201 CVE-2008-6084 URL:http://www.milw0rm.com/exploits/6803  View
396621 36201 CVE-2008-6084 BID:31873  View
396622 36201 CVE-2008-6084 URL:http://www.securityfocus.com/bid/31873  View
396623 36201 CVE-2008-6084 SECUNIA:32380  View
396624 36201 CVE-2008-6084 URL:http://secunia.com/advisories/32380  View
396625 36201 CVE-2008-6084 XF:iammasimplegallery-upload-file-upload(46041)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
43103 JVNDB-2009-004110 Joomla! 用の joomtracker コンポーネントにおける SQL インジェクションの脆弱性 Joomla! 用の Joomtracker (com_joomtracker) コンポーネントには、SQL インジェクションの脆弱性が存在します。 CVE-2008-6088 36201 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004110.html  View