NVD

Id
53362  
Name
CVE-2007-1155  
Description
Unrestricted file upload vulnerability in webSPELL allows remote authenticated administrators to upload and execute arbitrary PHP code via the add squad feature. NOTE: this issue may be an administrative feature, in which case this CVE may be REJECTED.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:N/AC:H/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-03-02  
Modified Date
2008-09-05  
Seq
2007-1155  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
270152 53362 CVE-2007-1155 2337  View
270153 53362 CVE-2007-1155 20070222 WebSpell > 4.0 Authentication Bypass and arbitrary code execution  View
270154 53362 CVE-2007-1155 webspell-addsquad-file-upload(32670)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
56473 JVNDB-2007-005165 webSPELL における任意の PHP コードを実行される脆弱性 webSPELL は、無制限にファイルをアップロードする不備があるため、任意の PHP コードをアップロードされる、および実行される脆弱性が存在します。 CVE-2007-1155 24510 CVE-2007-1155 53362 4.6 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005165.html 2007-03-02 2012-12-20 View