NVD

Id
161  
Name
CVE-2008-0175  
Description
Unrestricted file upload vulnerability in GE Fanuc Proficy Real-Time Information Portal 2.6 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension to the main virtual directory.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-01-28  
Modified Date
2011-03-07  
Seq
2008-0175  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
1295 161 CVE-2008-0175 3591  View
1296 161 CVE-2008-0175 http://support.gefanuc.com/support/index?page=kbchannel&id=KB12460  View
1297 161 CVE-2008-0175 VU#339345  View
1298 161 CVE-2008-0175 20080125 C4 Security Advisory - GE Fanuc Proficy Information Portal 2.6 Arbitrary File Upload and Execution  View
1299 161 CVE-2008-0175 20080129 Re: C4 Security Advisory - GE Fanuc Proficy Information Portal 2.6 Arbitrary File Upload and Execution  View
1300 161 CVE-2008-0175 27446  View
1301 161 CVE-2008-0175 1019274  View
1302 161 CVE-2008-0175 ADV-2008-0307  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45745 JVNDB-2008-001055 GE Fanuc Proficy Information Portal が任意のファイルをアップロードおよび実行を許可する問題 GE Fanuc Proficy Information Portal は、認証済みユーザに任意のファイルのアップロードを許可します。攻撃者は、実行可能なサーバーサイドスクリプト(例： Windows Internet Information Server の ASP shell 等）をアップロードしたり、ウェブサーバの実行権限で任意のコマンドを実行する可能性があります。 CVE-2008-0175 30288 CVE-2008-0175 161 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001055.html 2008-01-28 2008-02-07 View