CVE

Id
52740  
CVE No.
CVE-2011-4828  
Status
Candidate  
Description
Unrestricted file upload vulnerability in includes/inline_image_upload.php in AutoSec Tools V-CMS 1.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in temp/.  
Phase
Assigned (20111214)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
560089 52740 CVE-2011-4828 MISC:http://www.autosectools.com/Advisory/V-CMS-1.0-Arbitrary-Upload-236  View
560090 52740 CVE-2011-4828 CONFIRM:http://bugs.v-cms.org/changelog_page.php  View
560091 52740 CVE-2011-4828 CONFIRM:http://bugs.v-cms.org/view.php?id=53  View
560092 52740 CVE-2011-4828 BID:50706  View
560093 52740 CVE-2011-4828 URL:http://www.securityfocus.com/bid/50706  View
560094 52740 CVE-2011-4828 SECUNIA:46861  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
33168 JVNDB-2011-003408 SugarCRM の Leads モジュールにおける SQL インジェクションの脆弱性 SugarCRM の Leads モジュールには、SQL インジェクションの脆弱性が存在します。 CVE-2011-4833 52740 7.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003408.html  View