PT-2007-4570 · Livecms · Livecms

Clorox

+1

·

CVE-2007-3292

·

Publicado

2007-06-20

·

Atualizado

2017-10-11

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions LiveCMS versions 3.4 and earlier
Description The issue allows remote attackers to upload and execute arbitrary PHP code by specifying a PHP file type in a parameter intended for a small image associated with an article.
Recommendations For LiveCMS versions 3.4 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2007-3292

Produtos afetados

Livecms