PT-2009-2411

CVE-2008-6942

·

Publicado

2009-08-12

·

Atualizado

2017-09-29

Descrição por

CVSS 2.0
6.5
Média
MétricasAV:N/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions: ScriptsFeed Realtor Classifieds System (affected versions not specified)
Description: The issue allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a profile logo, then accessing it via a direct request to the file in re images/.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Explorabilidade
Exploit
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-20: Improper Input Validation
Identificadores relacionados
CVE-2008-6942
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com