NVD

Id
7725  
Name
CVE-2011-0678  
Description
Unrestricted file upload vulnerability in the EasyEdit module in Lomtec ActiveWeb Professional 3.0 allows remote attackers to execute arbitrary code by uploading an executable file via the UploadDirectory and Accepted Extensions fields in the getImagefile component of EasyEdit.cfm.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-01-28  
Modified Date
2011-02-17  
Seq
2011-0678  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
43774 7725 CVE-2011-0678 http://www.exploitdevelopment.com/Vulnerabilities/2010-WEB-002.html  View
43775 7725 CVE-2011-0678 VU#528212  View
43776 7725 CVE-2011-0678 45985  View
43777 7725 CVE-2011-0678 ADV-2011-0217  View
43778 7725 CVE-2011-0678 activeweb-easyedit-file-upload(65013)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30900 JVNDB-2011-001139 Lomtec ActiveWeb Professional 3.0 CMS における任意のファイルをアップロードおよび実行可能な脆弱性 Lomtec ActiveWeb Professional 3.0 は、Lomtec が提供するウェブコンテンツ管理サーバです。Lomtec ActiveWeb Professional 3.0 には、第三者によって任意のファイルをアップロードされる脆弱性が存在します。 CVE-2011-0678 48585 CVE-2011-0678 7725 6.8 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001139.html 2011-01-26 2011-02-28 View