NVD

Id
3462  
Name
CVE-2008-3592  
Description
Unrestricted file upload vulnerability in the File Manager in the admin panel in Twentyone Degrees Symphony 1.7.01 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension to a directory specified in the destination parameter, then accessing the uploaded file via a direct request, as demonstrated using workspace/masters/.  
Reject
 
CVSS Version
2  
CVSS Score
8.5  
Severity
High  
CVSS Base Score
8.5  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-08-11  
Modified Date
2009-01-29  
Seq
2008-3592  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
21740 3462 CVE-2008-3592 http://overture21.com/forum/comments.php?DiscussionID=1823  View
21741 3462 CVE-2008-3592 4137  View
21742 3462 CVE-2008-3592 6177  View
21743 3462 CVE-2008-3592 symphony-file-upload(44432)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
48044 JVNDB-2008-003354 Twentyone Degrees Symphony の File Manager における任意のコードを実行される脆弱性 Twentyone Degrees Symphony の管理パネルの File Manager には、無制限にファイルをアップロードする不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2008-3592 33705 CVE-2008-3592 3462 8.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003354.html 2008-08-11 2012-06-26 View