CVE

Id
37326  
CVE No.
CVE-2008-7209  
Status
Candidate  
Description
Unrestricted file upload vulnerability in the add2 action in a_upload.php in OneCMS 2.4, and possibly earlier, allows remote attackers to execute arbitrary code by uploading a file with an executable extension and using a safe content type such as image/gif, then accessing it via a direct request to the file in an unspecified directory.  
Phase
Assigned (20090911)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
404784 37326 CVE-2008-7209 BUGTRAQ:20080107 OneCMS Vulnerabilities  View
404785 37326 CVE-2008-7209 URL:http://www.securityfocus.com/archive/1/archive/1/485837/100/200/threaded  View
404786 37326 CVE-2008-7209 BUGTRAQ:20080126 Re: OneCMS Vulnerabilities  View
404787 37326 CVE-2008-7209 URL:http://www.securityfocus.com/archive/1/archive/1/487136/100/200/threaded  View
404788 37326 CVE-2008-7209 MILW0RM:4857  View
404789 37326 CVE-2008-7209 URL:http://www.milw0rm.com/exploits/4857  View
404790 37326 CVE-2008-7209 MISC:http://www.bugreport.ir/index_26.htm  View
404791 37326 CVE-2008-7209 CONFIRM:http://sourceforge.net/forum/forum.php?forum_id=774946  View
404792 37326 CVE-2008-7209 BID:27158  View
404793 37326 CVE-2008-7209 URL:http://www.securityfocus.com/bid/27158  View
404794 37326 CVE-2008-7209 OSVDB:51117  View
404795 37326 CVE-2008-7209 URL:http://osvdb.org/51117  View
404796 37326 CVE-2008-7209 VUPEN:ADV-2008-0081  View
404797 37326 CVE-2008-7209 URL:http://www.vupen.com/english/advisories/2008/0081  View
404798 37326 CVE-2008-7209 XF:onecms-aupload-file-upload(39485)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
42153 JVNDB-2009-003160 Mambo で使用される MOStlyCE の mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/connector.php におけるクロスサイトスクリプティングの脆弱性 Mambo で使用される MOStlyCE の mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/connector.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-7213 37326 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003160.html  View