CVE

Id
41188  
CVE No.
CVE-2009-3753  
Status
Candidate  
Description
Unrestricted file upload vulnerability in Opial 1.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension as a User Image, then accessing it via a request to the file in userimages, related to register.php.  
Phase
Assigned (20091022)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
452022 41188 CVE-2009-3753 MILW0RM:9122  View
452023 41188 CVE-2009-3753 URL:http://www.milw0rm.com/exploits/9122  View
452024 41188 CVE-2009-3753 BID:35641  View
452025 41188 CVE-2009-3753 URL:http://www.securityfocus.com/bid/35641  View
452026 41188 CVE-2009-3753 SECUNIA:35677  View
452027 41188 CVE-2009-3753 URL:http://secunia.com/advisories/35677  View
452028 41188 CVE-2009-3753 XF:opial-register-file-upload(51677)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
41538 JVNDB-2009-002545 Citrix XenCenterWeb の XenServer Resource Kit におけるクロスサイトスクリプティングの脆弱性 Citrix XenCenterWeb の XenServer Resource Kit 内にあるサンプルコードには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-3757 41188 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002545.html  View