NVD

Id
5419  
Name
CVE-2008-5677  
Description
Unrestricted file upload vulnerability in Kwalbum 2.0.4, 2.0.2, and earlier, when PICS_PATH is located in the web root, allows remote authenticated users with upload capability to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file under items/, related to the ReplaceBadFilenameChars function in include/ItemAdder.php. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
7.1  
Severity
High  
CVSS Base Score
7.1  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:N/AC:H/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-12-18  
Modified Date
2009-01-29  
Seq
2008-5677  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
33932 5419 CVE-2008-5677 4789  View
33933 5419 CVE-2008-5677 6664  View
33934 5419 CVE-2008-5677 31568  View
33935 5419 CVE-2008-5677 kwalbum-file-upload(45655)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
49880 JVNDB-2008-005190 Kwalbum における任意のファイルをアップロードされる脆弱性 Kwalbum は、ファイルアップロードされることにより、および include/ItemAdder.php の ReplaceBadFilenameChars 関数に関する処理に不備があるため、任意のファイルをアップロードおよび実行される脆弱性が存在します。 CVE-2008-5677 35790 CVE-2008-5677 5419 7.1 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005190.html 2008-12-18 2012-09-25 View