CVE

Id
37059  
CVE No.
CVE-2008-6942  
Status
Candidate  
Description
Unrestricted file upload vulnerability in ScriptsFeed Realtor Classifieds System (aka Real Estate Classifieds) allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a profile logo, then accessing it via a direct request to the file in re_images/.  
Phase
Assigned (20090811)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
402825 37059 CVE-2008-6942 MILW0RM:7110  View
402826 37059 CVE-2008-6942 URL:http://www.milw0rm.com/exploits/7110  View
402827 37059 CVE-2008-6942 BID:32293  View
402828 37059 CVE-2008-6942 URL:http://www.securityfocus.com/bid/32293  View
402829 37059 CVE-2008-6942 OSVDB:49960  View
402830 37059 CVE-2008-6942 URL:http://osvdb.org/49960  View
402831 37059 CVE-2008-6942 SECUNIA:32690  View
402832 37059 CVE-2008-6942 URL:http://secunia.com/advisories/32690  View
402833 37059 CVE-2008-6942 XF:realtorclassifiedssystem-image-file-upload(46609)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
42052 JVNDB-2009-003059 Collabtive の manageproject.php におけるクロスサイトスクリプティングの脆弱性 Collabtive の manageproject.php は、管理者が admin.php に関連した editform アクションを実行する際、適切に処理しないため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-6946 37059 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003059.html  View