NVD

Id
45356  
Name
CVE-2012-3811  
Description
Unrestricted file upload vulnerability in ImageUpload.ashx in the Wallboard application in Avaya IP Office Customer Call Reporter 7.0 before 7.0.5.8 Q1 2012 Maintenance Release and 8.0 before 8.0.9.13 Q1 2012 Maintenance Release allows remote attackers to execute arbitrary code by uploading an executable file and then accessing it via a direct request.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2012-07-03  
Modified Date
2012-07-17  
Seq
2012-3811  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
227745 45356 CVE-2012-3811 http://zerodayinitiative.com/advisories/ZDI-12-106/  View
227746 45356 CVE-2012-3811 https://downloads.avaya.com/css/P8/documents/100164021  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27277 JVNDB-2012-002984 Avaya IP Office Customer Call Reporter における任意のコードを実行される脆弱性 Avaya IP Office Customer Call Reporter の Wallboard アプリケーション内の ImageUpload.ashx には、ファイルをアップロードされることにより、任意のコードを実行される脆弱性が存在します。 CVE-2012-3811 57049 CVE-2012-3811 45356 10 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002984.html 2012-06-28 2012-07-05 View