CVE

Id
43341  
CVE No.
CVE-2010-0757  
Status
Candidate  
Description
Unrestricted file upload vulnerability in index.php/Attach in WikyBlog 1.7.3rc2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension using the uploadform action, then accessing it via a direct request to the file in userfiles/[username]/uploaded/.  
Phase
Assigned (20100226)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
472214 43341 CVE-2010-0757 MISC:http://packetstormsecurity.org/1002-exploits/wikyblog-rfishellxss.txt  View
472215 43341 CVE-2010-0757 EXPLOIT-DB:11560  View
472216 43341 CVE-2010-0757 URL:http://www.exploit-db.com/exploits/11560  View
472217 43341 CVE-2010-0757 BID:38386  View
472218 43341 CVE-2010-0757 URL:http://www.securityfocus.com/bid/38386  View
472219 43341 CVE-2010-0757 OSVDB:62648  View
472220 43341 CVE-2010-0757 URL:http://osvdb.org/62648  View
472221 43341 CVE-2010-0757 XF:wikyblog-index-file-upload(56517)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
38089 JVNDB-2010-003874 CommodityRentals Books/eBooks Rentals Script の index.php における SQL インジェクションの脆弱性 CommodityRentals Books/eBooks Rentals Script の index.php には、SQL インジェクションの脆弱性が存在します。 CVE-2010-0761 43341 7.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003874.html  View