CVE

Id
76868  
CVE No.
CVE-2014-9567  
Status
Candidate  
Description
Unrestricted file upload vulnerability in process-upload.php in ProjectSend (formerly cFTP) r100 through r561 allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request to the file in the upload/files/ or upload/temp/ directory.  
Phase
Assigned (20150107)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
705558 76868 CVE-2014-9567 EXPLOIT-DB:35424  View
705559 76868 CVE-2014-9567 URL:http://www.exploit-db.com/exploits/35424  View
705560 76868 CVE-2014-9567 EXPLOIT-DB:35660  View
705561 76868 CVE-2014-9567 URL:http://www.exploit-db.com/exploits/35660  View
705562 76868 CVE-2014-9567 MISC:http://packetstormsecurity.com/files/129759/ProjectSend-Arbitrary-File-Upload.html  View
705563 76868 CVE-2014-9567 OSVDB:116469  View
705564 76868 CVE-2014-9567 URL:http://osvdb.org/show/osvdb/116469  View
705565 76868 CVE-2014-9567 XF:projectsend-processupload-file-upload(99548)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
18666 JVNDB-2014-007541 VDG Security Sense における認証を回避される脆弱性 VDG Security Sense (旧 DIVA) には、認証を回避され、その結果、任意のプラグイン設定を読まれる、および変更される脆弱性が存在します。 CVE-2014-9575 76868 6.4 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007541.html  View