NVD

Id
61051  
Name
CVE-2006-2349  
Description
E-Business Designer (eBD) 3.1.4 and earlier allows remote attackers to upload or modify arbitrary files, and execute arbitrary code, via a direct request to (1) common/html_editor/image_browser.upload.html, (2) common/html_editor/image_browser.html, or (3) common/html_editor/html_editor.html. NOTE: this can also be used for cross-site scripting (XSS) attacks by uploading cascading style sheet (.CSS) files.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-05-12  
Modified Date
2016-10-17  
Seq
2006-2349  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
315316 61051 CVE-2006-2349 20060511 Several flaws in e-business designer (eBD)  View
315317 61051 CVE-2006-2349 [ebd-devel] 20060502 actualización de seguridad  View
315318 61051 CVE-2006-2349 20060616 Re: Several flaws in e-business designer (eBD)  View
315319 61051 CVE-2006-2349 891  View
315320 61051 CVE-2006-2349 1016326  View
315321 61051 CVE-2006-2349 20060511 Several flaws in e-business designer (eBD)  View
315322 61051 CVE-2006-2349 17933  View
315323 61051 CVE-2006-2349 ADV-2006-1784  View
315324 61051 CVE-2006-2349 ebd-multiple-auth-bypass(26474)  View

Related JVN