CVE

Id
42228  
CVE No.
CVE-2009-4793  
Status
Candidate  
Description
Unrestricted file upload vulnerability in adminpanel/scripts/addphotos.php in BandSite CMS 1.1.4 allows remote authenticated administrators to execute arbitrary PHP code by uploading a file with an executable extension via an addphotos action to adminpanel/index.php, and then accessing the file via a direct request with an images/gallery/ directory name. NOTE: some of these details are obtained from third party information.  
Phase
Assigned (20100422)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
461692 42228 CVE-2009-4793 MILW0RM:8309  View
461693 42228 CVE-2009-4793 URL:http://www.milw0rm.com/exploits/8309  View
461694 42228 CVE-2009-4793 SECUNIA:21992  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
38610 JVNDB-2010-004395 JobHut の browse.php における SQL インジェクションの脆弱性 JobHut の browse.php には、SQL インジェクションの脆弱性が存在します。 CVE-2009-4797 42228 7.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004395.html  View