CVE

Id
37037  
CVE No.
CVE-2008-6920  
Status
Candidate  
Description
Unrestricted file upload vulnerability in auth.php in phpEmployment 1.8 allows remote attackers to execute arbitrary code by uploading a file with an executable extension during a regnew action, then accessing it via a direct request to the file in photoes/.  
Phase
Assigned (20090810)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
402614 37037 CVE-2008-6920 MILW0RM:7563  View
402615 37037 CVE-2008-6920 URL:http://www.milw0rm.com/exploits/7563  View
402616 37037 CVE-2008-6920 BID:33000  View
402617 37037 CVE-2008-6920 URL:http://www.securityfocus.com/bid/33000  View
402618 37037 CVE-2008-6920 OSVDB:50981  View
402619 37037 CVE-2008-6920 URL:http://osvdb.org/50981  View
402620 37037 CVE-2008-6920 SECUNIA:33268  View
402621 37037 CVE-2008-6920 URL:http://secunia.com/advisories/33268  View
402622 37037 CVE-2008-6920 VUPEN:ADV-2008-3508  View
402623 37037 CVE-2008-6920 URL:http://www.vupen.com/english/advisories/2008/3508  View
402624 37037 CVE-2008-6920 XF:phpemployment-auth-file-upload(47592)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
43310 JVNDB-2009-004317 eSyndiCat Directory の register.php におけるクロスサイトスクリプティングの脆弱性 eSyndiCat Directory の register.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-6924 37037 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004317.html  View