CVE

Id
54396  
CVE No.
CVE-2012-1153  
Status
Candidate  
Description
Unrestricted file upload vulnerability in addons/uploadify/uploadify.php in appRain CMF 0.1.5 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the uploads directory.  
Phase
Assigned (20120214)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
571642 54396 CVE-2012-1153 BUGTRAQ:20120119 appRain CMF <= 0.1.5 (uploadify.php) Unrestricted File Upload Vulnerability  View
571643 54396 CVE-2012-1153 URL:http://archives.neohapsis.com/archives/bugtraq/2012-01/0128.html  View
571644 54396 CVE-2012-1153 EXPLOIT-DB:18392  View
571645 54396 CVE-2012-1153 URL:http://www.exploit-db.com/exploits/18392  View
571646 54396 CVE-2012-1153 EXPLOIT-DB:18922  View
571647 54396 CVE-2012-1153 URL:http://www.exploit-db.com/exploits/18922  View
571648 54396 CVE-2012-1153 MLIST:[oss-security] 20120309 CVE-request: appRain CMF uploadify.php File Upload Remote PHP Code Execution  View
571649 54396 CVE-2012-1153 URL:http://www.openwall.com/lists/oss-security/2012/03/09/5  View
571650 54396 CVE-2012-1153 MLIST:[oss-security] 20120309 Re: CVE-request: appRain CMF uploadify.php File Upload Remote PHP Code Execution  View
571651 54396 CVE-2012-1153 URL:http://www.openwall.com/lists/oss-security/2012/03/10/5  View
571652 54396 CVE-2012-1153 BID:51576  View
571653 54396 CVE-2012-1153 URL:http://www.securityfocus.com/bid/51576  View
571654 54396 CVE-2012-1153 OSVDB:78473  View
571655 54396 CVE-2012-1153 URL:http://www.osvdb.org/78473  View
571656 54396 CVE-2012-1153 XF:appraincmf-uploadify-file-upload(72466)  View

Related JVN