NVD

Id
62282  
Name
CVE-2006-3608  
Description
The Gallery module in Simone Vellei Flatnuke 2.5.7 and earlier, when Gallery uploads are enabled, does not restrict the extensions of uploaded files that begin with a GIF header, which allows remote authenticated users to execute arbitrary PHP code via an uploaded .php file.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:N/AC:H/Au:S/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-07-18  
Modified Date
2008-09-05  
Seq
2006-3608  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
322716 62282 CVE-2006-3608 http://retrogod.altervista.org/flatnuke257_adv.html  View
322717 62282 CVE-2006-3608 1016499  View
322718 62282 CVE-2006-3608 20060713 flatnuke <= 2.5.7 arbitrary php file upload  View
322719 62282 CVE-2006-3608 20060807 Re: flatnuke <= 2.5.7 arbitrary php file upload  View
322720 62282 CVE-2006-3608 18966  View
322721 62282 CVE-2006-3608 flatnuke-gallery-code-execution(27731)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
60499 JVNDB-2006-002765 Simone Vellei Flatnuke の Gallery モジュールにおける任意の PHP コードを実行される脆弱性 Simone Vellei Flatnuke の Gallery モジュールは、Gallery アップロードが有効になっている際、GIF ヘッダで始まるアップロードされたファイルの拡張子を制限しないため、任意の PHP コードを実行される脆弱性が存在します。 CVE-2006-3608 19710 CVE-2006-3608 62282 4.6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002765.html 2006-07-18 2012-12-20 View