CVE

Id
36736  
CVE No.
CVE-2008-6619  
Status
Candidate  
Description
Unrestricted file upload vulnerability in class/ApplyDB.php in ClassSystem 2.3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in class/UploadHomepage/.  
Phase
Assigned (20090406)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
400392 36736 CVE-2008-6619 BUGTRAQ:20080526 Class System v2.3 Multiple Remote Vulnerabilities  View
400393 36736 CVE-2008-6619 URL:http://www.securityfocus.com/archive/1/archive/1/492583/100/0/threaded  View
400394 36736 CVE-2008-6619 MISC:http://www.chroot.org/exploits/chroot_uu_005  View
400395 36736 CVE-2008-6619 BID:29372  View
400396 36736 CVE-2008-6619 URL:http://www.securityfocus.com/bid/29372  View
400397 36736 CVE-2008-6619 SECUNIA:30365  View
400398 36736 CVE-2008-6619 URL:http://secunia.com/advisories/30365  View
400399 36736 CVE-2008-6619 VUPEN:ADV-2008-1664  View
400400 36736 CVE-2008-6619 URL:http://www.vupen.com/english/advisories/2008/1664  View
400401 36736 CVE-2008-6619 XF:classsystem-applydb-file-upload(42651)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
44517 JVNDB-2009-005524 WEBBDOMAIN Post Card の getin.php における SQL インジェクションの脆弱性 WEBBDOMAIN Post Card の getin.php には、SQL インジェクションの脆弱性が存在します。 CVE-2008-6623 36736 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005524.html  View