CVE

Id
64412  
CVE No.
CVE-2013-4465  
Status
Candidate  
Description
Unrestricted file upload vulnerability in the avatar upload functionality in Simple Machines Forum before 2.0.6 and 2.1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory.  
Phase
Assigned (20130612)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
634976 64412 CVE-2013-4465 MLIST:[oss-security] 20131022 Re: CVE Request: Simple Machines Forum (SMF) Remote file inclusion vulnerability  View
634977 64412 CVE-2013-4465 URL:http://www.openwall.com/lists/oss-security/2013/10/23/6  View
634978 64412 CVE-2013-4465 MLIST:[oss-security] 20131024 Re: CVE Request: Simple Machines Forum (SMF) Remote file inclusion vulnerability  View
634979 64412 CVE-2013-4465 URL:http://www.openwall.com/lists/oss-security/2013/10/25/3  View
634980 64412 CVE-2013-4465 CONFIRM:http://download.simplemachines.org/index.php?thanks;filename=smf_2-0-6_changelog.txt  View
634981 64412 CVE-2013-4465 CONFIRM:https://github.com/SimpleMachines/SMF2.1/issues/701  View
634982 64412 CVE-2013-4465 BID:63275  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
23426 JVNDB-2013-005001 Linux Kernel におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel は、UDP Fragmentation Offload (UFO) が有効になっている場合、特定のデータ構造を適切に初期化しないため、サービス運用妨害 (メモリ破損およびシステムクラッシュ) 状態にされる、または権限を取得される脆弱性が存在します。 CVE-2013-4470 64412 6.9 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005001.html  View