CVE

Id
37146  
CVE No.
CVE-2008-7029  
Status
Candidate  
Description
Unrestricted file upload vulnerability in usercp.php in AlilG Application AliBoard Beta allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as an avatar, then accessing it via a direct request to the file in uploads/avatars/.  
Phase
Assigned (20090823)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
403516 37146 CVE-2008-7029 BUGTRAQ:20080211 aliboard Beta Upload Shell From ControlPanel  View
403517 37146 CVE-2008-7029 URL:http://www.securityfocus.com/archive/1/archive/1/487921/100/200/threaded  View
403518 37146 CVE-2008-7029 BID:27737  View
403519 37146 CVE-2008-7029 URL:http://www.securityfocus.com/bid/27737  View
403520 37146 CVE-2008-7029 OSVDB:51183  View
403521 37146 CVE-2008-7029 URL:http://osvdb.org/51183  View
403522 37146 CVE-2008-7029 XF:aliboard-usercp-file-upload(40276)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
42097 JVNDB-2009-003104 Joomla! 用 Simple Shop Galore コンポーネントにおける SQL インジェクションの脆弱性 Joomla! 用 Simple Shop Galore (com_simpleshop) コンポーネントには、SQL インジェクションの脆弱性が存在します。 CVE-2008-7033 37146 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003104.html  View