CVE

Id
42974  
CVE No.
CVE-2010-0390  
Status
Candidate  
Description
Unrestricted file upload vulnerability in maxImageUpload/index.php in PHP F1 Max"s Image Uploader 1.0, when Apache is not configured to handle the mime-type for files with pjpeg or jpeg extensions, allows remote attackers to execute arbitrary code by uploading a file with a pjpeg or jpeg extension, then accessing it via a direct request to the file in original/. NOTE: some of these details are obtained from third party information.  
Phase
Assigned (20100126)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
468257 42974 CVE-2010-0390 EXPLOIT-DB:11169  View
468258 42974 CVE-2010-0390 URL:http://www.exploit-db.com/exploits/11169  View
468259 42974 CVE-2010-0390 OSVDB:61808  View
468260 42974 CVE-2010-0390 URL:http://osvdb.org/61808  View
468261 42974 CVE-2010-0390 SECUNIA:38018  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
38681 JVNDB-2010-004466 Trac Git プラグインの PyGIT.py における任意のコマンドを実行される脆弱性 Debian GNU/Linux 用の Trac Git プラグイン (trac-git) の PyGIT.py には、Trac 内で有効になっている際、任意のコマンドを実行される脆弱性が存在します。 CVE-2010-0394 42974 6.8 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004466.html  View