CVE

Id
37095  
CVE No.
CVE-2008-6978  
Status
Candidate  
Description
Unrestricted file upload vulnerability in Full Revolution aspWebAlbum 3.2 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in pics/, related to the uploadmedia action in album.asp.  
Phase
Assigned (20090817)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
403126 37095 CVE-2008-6978 MILW0RM:6357  View
403127 37095 CVE-2008-6978 URL:http://www.milw0rm.com/exploits/6357  View
403128 37095 CVE-2008-6978 MILW0RM:6420  View
403129 37095 CVE-2008-6978 URL:http://www.milw0rm.com/exploits/6420  View
403130 37095 CVE-2008-6978 BID:30996  View
403131 37095 CVE-2008-6978 URL:http://www.securityfocus.com/bid/30996  View
403132 37095 CVE-2008-6978 OSVDB:47913  View
403133 37095 CVE-2008-6978 URL:http://osvdb.org/47913  View
403134 37095 CVE-2008-6978 SECUNIA:31649  View
403135 37095 CVE-2008-6978 URL:http://secunia.com/advisories/31649  View
403136 37095 CVE-2008-6978 XF:aspwebalbum-image-file-upload(44876)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
42069 JVNDB-2009-003076 devalcms の index.php におけるクロスサイトスクリプティングの脆弱性 devalcms の index.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-6982 37095 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003076.html  View