CVE

Id
36966  
CVE No.
CVE-2008-6849  
Status
Candidate  
Description
Unrestricted file upload vulnerability in index.php in phpGreetCards 3.7 allows remote attackers to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a via a link that is listed by userfiles/number_shell.php.  
Phase
Assigned (20090707)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
402107 36966 CVE-2008-6849 MILW0RM:7561  View
402108 36966 CVE-2008-6849 URL:http://www.milw0rm.com/exploits/7561  View
402109 36966 CVE-2008-6849 BID:32995  View
402110 36966 CVE-2008-6849 URL:http://www.securityfocus.com/bid/32995  View
402111 36966 CVE-2008-6849 OSVDB:50988  View
402112 36966 CVE-2008-6849 URL:http://osvdb.org/50988  View
402113 36966 CVE-2008-6849 SECUNIA:33304  View
402114 36966 CVE-2008-6849 URL:http://secunia.com/advisories/33304  View
402115 36966 CVE-2008-6849 VUPEN:ADV-2008-3510  View
402116 36966 CVE-2008-6849 URL:http://www.vupen.com/english/advisories/2008/3510  View
402117 36966 CVE-2008-6849 XF:phpgreetcards-index-file-upload(47591)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
43299 JVNDB-2009-004306 AIST NetCat の modules/poll/index.php における SQL インジェクションの脆弱性 AIST NetCat の modules/poll/index.php には、SQL インジェクションの脆弱性が存在します。 CVE-2008-6853 36966 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004306.html  View