CVE

Id
39094  
CVE No.
CVE-2009-1659  
Status
Candidate  
Description
Unrestricted file upload vulnerability in admin/uploadimage.php in eLitius 1.0 allows remote attackers to bypass intended access restrictions and upload and execute arbitrary files via an avatar file with an accepted Content-Type such as image/gif, then requesting the file in admin/banners/.  
Phase
Assigned (20090517)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
429347 39094 CVE-2009-1659 MILW0RM:8603  View
429348 39094 CVE-2009-1659 URL:http://www.milw0rm.com/exploits/8603  View
429349 39094 CVE-2009-1659 BID:34813  View
429350 39094 CVE-2009-1659 URL:http://www.securityfocus.com/bid/34813  View
429351 39094 CVE-2009-1659 VUPEN:ADV-2009-1248  View
429352 39094 CVE-2009-1659 URL:http://www.vupen.com/english/advisories/2009/1248  View
429353 39094 CVE-2009-1659 XF:elitius-uploadimage-file-upload(50305)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
42416 JVNDB-2009-003423 Easy Scripts Answer and Question Script の myaccount.php における任意のコードを実行される脆弱性 Easy Scripts Answer and Question Script の myaccount.php には、無制限にファイルをアップロードされる不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2009-1663 39094 6.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003423.html  View