CVE

Id
69518  
CVE No.
CVE-2014-2223  
Status
Candidate  
Description
Unrestricted file upload vulnerability in plog-admin/plog-upload.php in Plogger 1.0 RC1 and earlier allows remote authenticated users to execute arbitrary code by uploading a ZIP file that contains a PHP file and a non-zero length PNG file, then accessing the PHP file via a direct request to it in plog-content/uploads/archive/.  
Phase
Assigned (20140226)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
665742 69518 CVE-2014-2223 EXPLOIT-DB:34447  View
665743 69518 CVE-2014-2223 URL:http://www.exploit-db.com/exploits/34447  View
665744 69518 CVE-2014-2223 MLIST:[oss-security] 20140227 CVE request: PLOGGER 1.0RC1 multiple vulnerabilities  View
665745 69518 CVE-2014-2223 URL:http://seclists.org/oss-sec/2014/q1/443  View
665746 69518 CVE-2014-2223 MLIST:[oss-security] 20140227 Re: CVE request: PLOGGER 1.0RC1 multiple vulnerabilities  View
665747 69518 CVE-2014-2223 URL:http://seclists.org/oss-sec/2014/q1/446  View
665748 69518 CVE-2014-2223 MISC:http://packetstormsecurity.com/files/128029/Plogger-Authenticated-Arbitrary-File-Upload.html  View
665749 69518 CVE-2014-2223 MISC:https://www.sysdream.com/CVE-2014-2223_CVE-2014-2224  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
12640 JVNDB-2014-001515 synetics i-doit pro の API におけるクロスサイトスクリプティングの脆弱性 synetics i-doit pro の API には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2014-2231 69518 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001515.html  View