CVE

Id
43580  
CVE No.
CVE-2010-0996  
Status
Candidate  
Description
Unrestricted file upload vulnerability in e107 before 0.7.20 allows remote authenticated users to execute arbitrary code by uploading a .php.filetypesphp file. NOTE: the vendor disputes the significance of this issue, noting that "an odd set of preferences and a missing file" are required.  
Phase
Assigned (20100318)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
474698 43580 CVE-2010-0996 BUGTRAQ:20100419 Secunia Research: e107 Avatar/Photograph Image File Upload Vulnerability  View
474699 43580 CVE-2010-0996 URL:http://www.securityfocus.com/archive/1/archive/1/510805/100/0/threaded  View
474700 43580 CVE-2010-0996 MISC:http://e107.org/svn_changelog.php?version=0.7.20  View
474701 43580 CVE-2010-0996 MISC:http://secunia.com/secunia_research/2010-44/  View
474702 43580 CVE-2010-0996 CONFIRM:http://e107.org/comment.php?comment.news.864  View
474703 43580 CVE-2010-0996 BID:39540  View
474704 43580 CVE-2010-0996 URL:http://www.securityfocus.com/bid/39540  View
474705 43580 CVE-2010-0996 SECUNIA:39013  View
474706 43580 CVE-2010-0996 URL:http://secunia.com/advisories/39013  View
474707 43580 CVE-2010-0996 VUPEN:ADV-2010-0919  View
474708 43580 CVE-2010-0996 URL:http://www.vupen.com/english/advisories/2010/0919  View
474709 43580 CVE-2010-0996 XF:e107-phpfiletypesphp-file-upload(57932)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
38797 JVNDB-2010-004582 KDE SC の KGet におけるディレクトリトラバーサルの脆弱性 KDE SC の KGet には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2010-1000 43580 5.8 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004582.html  View