NVD

Id
53305  
Name
CVE-2007-1097  
Description
Unrestricted file upload vulnerability in the onAttachFiles function in the upload tool (inc/lib/attachment.lib.php) in Wiclear before 0.11.1 allows remote attackers to upload and execute arbitrary PHP code via unspecified vectors related to filename validation. NOTE: some details were obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-02-26  
Modified Date
2011-03-17  
Seq
2007-1097  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
269924 53305 CVE-2007-1097 http://wiclear.free.fr/?Download  View
269925 53305 CVE-2007-1097 ADV-2007-0792  View
269926 53305 CVE-2007-1097 wiclear-onattachfiles-file-upload(32757)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
56448 JVNDB-2007-005140 Wiclear の upload tool における任意の PHP コードを実行される脆弱性 Wiclear の upload tool (inc/lib/attachment.lib.php) の onAttachFiles 関数は、無制限にファイルをアップロードする、およびファイル名の検証に関する処理に不備があるため、任意の PHP コードをアップロードされる、および実行される脆弱性が存在します。 CVE-2007-1097 24452 CVE-2007-1097 53305 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005140.html 2007-02-26 2012-12-20 View