NVD

Id
43170  
Name
CVE-2012-1153  
Description
Unrestricted file upload vulnerability in addons/uploadify/uploadify.php in appRain CMF 0.1.5 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the uploads directory.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-10-06  
Modified Date
2013-01-03  
Seq
2012-1153  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
217311 43170 CVE-2012-1153 20120119 appRain CMF <= 0.1.5 (uploadify.php) Unrestricted File Upload Vulnerability  View
217312 43170 CVE-2012-1153 18392  View
217313 43170 CVE-2012-1153 18922  View
217314 43170 CVE-2012-1153 [oss-security] 20120309 CVE-request: appRain CMF uploadify.php File Upload Remote PHP Code Execution  View
217315 43170 CVE-2012-1153 [oss-security] 20120309 Re: CVE-request: appRain CMF uploadify.php File Upload Remote PHP Code Execution  View
217316 43170 CVE-2012-1153 51576  View
217317 43170 CVE-2012-1153 appraincmf-uploadify-file-upload(72466)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29033 JVNDB-2012-004740 appRain CMF の addons/uploadify/uploadify.php における任意のコードを実行される脆弱性 appRain CMF の addons/uploadify/uploadify.php には、ファイルをアップロードされることにより、任意のコードを実行される脆弱性が存在します。 CVE-2012-1153 54391 CVE-2012-1153 43170 6.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004740.html 2012-10-06 2012-10-09 View