NVD

Id
5405  
Name
CVE-2008-5663  
Description
Multiple unrestricted file upload vulnerabilities in Kusaba 1.0.4 and earlier allow remote authenticated users to execute arbitrary code by uploading a file with an executable extension using (1) load_receiver.php or (2) a shipainter action to paint_save.php, then accessing the uploaded file via a direct request to this file in their user directory.  
Reject
 
CVSS Version
2  
CVSS Score
9  
Severity
High  
CVSS Base Score
9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-12-18  
Modified Date
2009-01-29  
Seq
2008-5663  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
33877 5405 CVE-2008-5663 4782  View
33878 5405 CVE-2008-5663 6706  View
33879 5405 CVE-2008-5663 6711  View
33880 5405 CVE-2008-5663 31668  View
33881 5405 CVE-2008-5663 31685  View
33882 5405 CVE-2008-5663 kusaba-paintsave-code-execution(45793)  View
33883 5405 CVE-2008-5663 kusaba-loadreceiver-code-execution(45794)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
49878 JVNDB-2008-005188 Kusaba における任意のファイルを実行される脆弱性 Kusaba は、ファイルを無制限にアップロードするため、任意のファイルを実行される脆弱性が存在します。 CVE-2008-5663 35776 CVE-2008-5663 5405 9 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005188.html 2008-12-18 2012-09-25 View