CVE

Id
37048  
CVE No.
CVE-2008-6931  
Status
Candidate  
Description
Unrestricted file upload vulnerability in PHPStore Job Search (aka PHPCareers) allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a resume photo, then accessing it via a direct request to the file in jobseekers/jobseeker_profile_images.  
Phase
Assigned (20090811)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
402714 37048 CVE-2008-6931 MILW0RM:7083  View
402715 37048 CVE-2008-6931 URL:http://www.milw0rm.com/exploits/7083  View
402716 37048 CVE-2008-6931 OSVDB:50295  View
402717 37048 CVE-2008-6931 URL:http://osvdb.org/50295  View
402718 37048 CVE-2008-6931 SECUNIA:32626  View
402719 37048 CVE-2008-6931 URL:http://secunia.com/advisories/32626  View
402720 37048 CVE-2008-6931 VUPEN:ADV-2008-3099  View
402721 37048 CVE-2008-6931 URL:http://www.vupen.com/english/advisories/2008/3099  View
402722 37048 CVE-2008-6931 XF:jobsearch-jobseeker-file-upload(52447)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
43313 JVNDB-2009-004320 Exodus におけるサービス運用妨害 (DoS) の脆弱性 Exodus は、引数の挿入により、任意のコマンドラインの引数を挿入される、任意のファイルを上書きされる、およびサービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2008-6935 37048 10 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004320.html  View