CVE

Id
37061  
CVE No.
CVE-2008-6944  
Status
Candidate  
Description
Unrestricted file upload vulnerability in ScriptsFeed Auto Classifieds allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a profile logo, then accessing it via a direct request to the file in cars_images/.  
Phase
Assigned (20090811)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
402843 37061 CVE-2008-6944 MILW0RM:7111  View
402844 37061 CVE-2008-6944 URL:http://www.milw0rm.com/exploits/7111  View
402845 37061 CVE-2008-6944 BID:32293  View
402846 37061 CVE-2008-6944 URL:http://www.securityfocus.com/bid/32293  View
402847 37061 CVE-2008-6944 OSVDB:49960  View
402848 37061 CVE-2008-6944 URL:http://osvdb.org/49960  View
402849 37061 CVE-2008-6944 SECUNIA:32690  View
402850 37061 CVE-2008-6944 URL:http://secunia.com/advisories/32690  View
402851 37061 CVE-2008-6944 XF:autoclassifiedssoftware-image-file-upload(46608)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
42054 JVNDB-2009-003061 Collabtive における任意のコードを実行される脆弱性 Collabtive は、ファイルを無制限にアップロードするため、任意のコードを実行される脆弱性が存在します。 CVE-2008-6948 37061 6.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003061.html  View