CVE

Id
37807  
CVE No.
CVE-2009-0372  
Status
Candidate  
Description
Unrestricted file upload vulnerability in index.php in Miltenovik Manojlo MemHT Portal 4.0.1 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension and an image content type via a users editProfile action, then accessing this file via a direct request to the file in images/avatar/uploaded/.  
Phase
Assigned (20090130)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
410879 37807 CVE-2009-0372 MILW0RM:7859  View
410880 37807 CVE-2009-0372 URL:http://www.milw0rm.com/exploits/7859  View
410881 37807 CVE-2009-0372 BID:33424  View
410882 37807 CVE-2009-0372 URL:http://www.securityfocus.com/bid/33424  View
410883 37807 CVE-2009-0372 SECUNIA:33626  View
410884 37807 CVE-2009-0372 URL:http://secunia.com/advisories/33626  View
410885 37807 CVE-2009-0372 XF:memht-avatar-file-upload(48199)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
35268 JVNDB-2010-001048 RealNetworks RealPlayer の DLL ファイルにおける任意のコードを実行される脆弱性 RealNetworks RealPlayer の DLL ファイルには、任意のコードを実行される脆弱性が存在します。 CVE-2009-0376 37807 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001048.html  View