CVE

Id
48590  
CVE No.
CVE-2011-0678  
Status
Candidate  
Description
Unrestricted file upload vulnerability in the EasyEdit module in Lomtec ActiveWeb Professional 3.0 allows remote attackers to execute arbitrary code by uploading an executable file via the UploadDirectory and Accepted Extensions fields in the getImagefile component of EasyEdit.cfm.  
Phase
Assigned (20110128)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
528057 48590 CVE-2011-0678 MISC:http://www.exploitdevelopment.com/Vulnerabilities/2010-WEB-002.html  View
528058 48590 CVE-2011-0678 CERT-VN:VU#528212  View
528059 48590 CVE-2011-0678 URL:http://www.kb.cert.org/vuls/id/528212  View
528060 48590 CVE-2011-0678 BID:45985  View
528061 48590 CVE-2011-0678 URL:http://www.securityfocus.com/bid/45985  View
528062 48590 CVE-2011-0678 OSVDB:70669  View
528063 48590 CVE-2011-0678 URL:http://osvdb.org/70669  View
528064 48590 CVE-2011-0678 SECUNIA:43031  View
528065 48590 CVE-2011-0678 URL:http://secunia.com/advisories/43031  View
528066 48590 CVE-2011-0678 VUPEN:ADV-2011-0217  View
528067 48590 CVE-2011-0678 URL:http://www.vupen.com/english/advisories/2011/0217  View
528068 48590 CVE-2011-0678 XF:activeweb-easyedit-file-upload(65013)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
33961 JVNDB-2011-004203 Opera におけるクリックジャック攻撃される脆弱性 Opera は、opera: URL の使用を適切に制限しないため、クリックジャック攻撃される脆弱性が存在します。 CVE-2011-0683 48590 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004203.html  View