CVE

Id
49241  
CVE No.
CVE-2011-1329  
Status
Candidate  
Description
WalRack 1.x before 1.1.9 and 2.x before 2.0.7 does not properly restrict file uploads, which allows remote attackers to execute arbitrary PHP code via vectors involving a double extension, as demonstrated by a .php.zzz file.  
Phase
Assigned (20110309)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
535044 49241 CVE-2011-1329 CONFIRM:http://digit.que.ne.jp/work/index.cgi?WalRack  View
535045 49241 CVE-2011-1329 CONFIRM:http://digit.que.ne.jp/work/index.cgi?WalRack2  View
535046 49241 CVE-2011-1329 CONFIRM:http://jvn.jp/en/jp/JVN46984044/54827/index.html  View
535047 49241 CVE-2011-1329 JVN:JVN#46984044  View
535048 49241 CVE-2011-1329 URL:http://jvn.jp/en/jp/JVN46984044/index.html  View
535049 49241 CVE-2011-1329 JVNDB:JVNDB-2011-000032  View
535050 49241 CVE-2011-1329 URL:http://jvndb.jvn.jp/jvndb/JVNDB-2011-000032  View
535051 49241 CVE-2011-1329 BID:48001  View
535052 49241 CVE-2011-1329 URL:http://www.securityfocus.com/bid/48001  View
535053 49241 CVE-2011-1329 XF:walrack-uploaded-files-code-exec(67641)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
30698 JVNDB-2011-000046 複数のサイボウズ製品におけるクロスサイトスクリプティングの脆弱性 サイボウズ株式会社が提供する複数の製品には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2011-1334 49241 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000046.html  View