CVE

Id
37047  
CVE No.
CVE-2008-6930  
Status
Candidate  
Description
Unrestricted file upload vulnerability in PHPStore Real Estate allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a logo, then accessing it via a direct request to the file in realty/re_images/.  
Phase
Assigned (20090811)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
402705 37047 CVE-2008-6930 MILW0RM:7085  View
402706 37047 CVE-2008-6930 URL:http://www.milw0rm.com/exploits/7085  View
402707 37047 CVE-2008-6930 OSVDB:50293  View
402708 37047 CVE-2008-6930 URL:http://osvdb.org/50293  View
402709 37047 CVE-2008-6930 SECUNIA:32626  View
402710 37047 CVE-2008-6930 URL:http://secunia.com/advisories/32626  View
402711 37047 CVE-2008-6930 VUPEN:ADV-2008-3101  View
402712 37047 CVE-2008-6930 URL:http://www.vupen.com/english/advisories/2008/3101  View
402713 37047 CVE-2008-6930 XF:realestate-reimages-file-upload(52446)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
44635 JVNDB-2009-005642 Sanus|artificium Free simple guestbook PHP における messages.txt へ任意の PHP コードを挿入される脆弱性 Sanus|artificium Free simple guestbook PHP は、2008 年 11 月 11 日より前にダウンロードされている際、静的コードを挿入されることにより、messages.txt へ任意の PHP コードを挿入される脆弱性が存在します。 CVE-2008-6934 37047 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005642.html  View