CVE

Id
37049  
CVE No.
CVE-2008-6932  
Status
Candidate  
Description
Unrestricted file upload vulnerability in submit_file.php in AlstraSoft SendIt Pro allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in send/files/.  
Phase
Assigned (20090811)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
402723 37049 CVE-2008-6932 MILW0RM:7101  View
402724 37049 CVE-2008-6932 URL:http://www.milw0rm.com/exploits/7101  View
402725 37049 CVE-2008-6932 BID:32277  View
402726 37049 CVE-2008-6932 URL:http://www.securityfocus.com/bid/32277  View
402727 37049 CVE-2008-6932 OSVDB:49844  View
402728 37049 CVE-2008-6932 URL:http://osvdb.org/49844  View
402729 37049 CVE-2008-6932 SECUNIA:32666  View
402730 37049 CVE-2008-6932 URL:http://secunia.com/advisories/32666  View
402731 37049 CVE-2008-6932 VUPEN:ADV-2008-3139  View
402732 37049 CVE-2008-6932 URL:http://www.vupen.com/english/advisories/2008/3139  View
402733 37049 CVE-2008-6932 XF:senditpro-submitfile-file-upload(46593)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
43314 JVNDB-2009-004321 Exodus におけるサービス運用妨害 (DoS) の脆弱性 Exodus は、引数の挿入により、任意のコマンドラインの引数を挿入される、任意のファイルを上書きされる、およびサービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2008-6936 37049 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004321.html  View