CVE

Id
50657  
CVE No.
CVE-2011-2745  
Status
Candidate  
Description
upload_handler.php in the swfupload extension in Chyrp 2.0 and earlier relies on client-side JavaScript code to restrict the file extensions of uploaded files, which allows remote authenticated users to upload a .php file, and consequently execute arbitrary PHP code, via a write_post action to the default URI under admin/.  
Phase
Assigned (20110713)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
547033 50657 CVE-2011-2745 MLIST:[oss-security] 20110713 Re: [oCERT-2011-001] Chyrp input sanitization errors  View
547034 50657 CVE-2011-2745 URL:http://www.openwall.com/lists/oss-security/2011/07/13/6  View
547035 50657 CVE-2011-2745 MLIST:[oss-security] 20110713 [oCERT-2011-001] Chyrp input sanitization errors  View
547036 50657 CVE-2011-2745 URL:http://www.openwall.com/lists/oss-security/2011/07/13/5  View
547037 50657 CVE-2011-2745 MISC:http://www.justanotherhacker.com/advisories/JAHx113.txt  View
547038 50657 CVE-2011-2745 BID:48672  View
547039 50657 CVE-2011-2745 URL:http://www.securityfocus.com/bid/48672  View
547040 50657 CVE-2011-2745 SREASON:8314  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
34561 JVNDB-2011-004803 Novell File Reporter の NFRAgent.exe における任意のファイルを削除される脆弱性 Novell File Reporter の NFRAgent.exe には、任意のファイルを削除される脆弱性が存在します。 CVE-2011-2750 50657 5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004803.html  View