CVE

Id
52995  
CVE No.
CVE-2011-5083  
Status
Candidate  
Description
Unrestricted file upload vulnerability in inc/swf/swfupload.swf in Dotclear 2.3.1 and 2.4.2 allows remote attackers to execute arbitrary code by uploading a file with an executable PHP extension, then accessing it via a direct request to the file in an unspecified directory.  
Phase
Assigned (20120319)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
561487 52995 CVE-2011-5083 EXPLOIT-DB:18529  View
561488 52995 CVE-2011-5083 URL:http://www.exploit-db.com/exploits/18529  View
561489 52995 CVE-2011-5083 MISC:http://cxsecurity.com/issue/WLB-2011090012  View
561490 52995 CVE-2011-5083 MISC:http://vigilance.fr/vulnerability/Dotclear-file-upload-via-swfupload-swf-11396  View
561491 52995 CVE-2011-5083 BID:52173  View
561492 52995 CVE-2011-5083 URL:http://www.securityfocus.com/bid/52173  View
561493 52995 CVE-2011-5083 OSVDB:79665  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
34798 JVNDB-2011-005040 ICONICS GENESIS32 および BizViz における任意のコードを実行される脆弱性 ICONICS GENESIS32 および BizViz の GENESIS32 IcoSetServer ActiveX コントロールには、ユーザ入力に基づいて信頼済みゾーンを構成するため、任意のコードを実行される脆弱性が存在します。 CVE-2011-5088 52995 9.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-005040.html  View