CVE

Id
39673  
CVE No.
CVE-2009-2238  
Status
Candidate  
Description
Unrestricted file upload vulnerability in includes/shared_scripts/wysiwyg_editor/assetmanager/assetmanager.asp in DMXReady Registration Manager 1.1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in assets/webblogmanager.  
Phase
Assigned (20090627)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
436219 39673 CVE-2009-2238 BUGTRAQ:20090520 DMXReady Registration Manager Arbitrary File Upload Vulnerability  View
436220 39673 CVE-2009-2238 URL:http://www.securityfocus.com/archive/1/archive/1/503648/100/0/threaded  View
436221 39673 CVE-2009-2238 MILW0RM:8749  View
436222 39673 CVE-2009-2238 URL:http://www.milw0rm.com/exploits/8749  View
436223 39673 CVE-2009-2238 BID:35039  View
436224 39673 CVE-2009-2238 URL:http://www.securityfocus.com/bid/35039  View
436225 39673 CVE-2009-2238 XF:rm-assetmanager-file-upload(50651)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
42551 JVNDB-2009-003558 ASP Inline Corporate Calendar の active_appointments.asp における SQL インジェクションの脆弱性 ASP Inline Corporate Calendar の active_appointments.asp には、SQL インジェクションの脆弱性が存在します。 CVE-2009-2242 39673 6.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003558.html  View