PT-2013-1973

CVE-2012-6509

·

Publicado

2013-01-24

·

Atualizado

2013-01-29

Descrição por

CVSS 2.0
7.5
Alta
MétricasAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions NetArt Media Car Portal version 3.0
Description The issue allows remote attackers to execute arbitrary PHP code by uploading a file with a double extension. This can be achieved by uploading a file such as .php%00.jpg.
Recommendations For NetArt Media Car Portal version 3.0, consider restricting file uploads to only allow specific, safe extensions to prevent the execution of arbitrary PHP code. As a temporary workaround, consider disabling file upload functionality until a patch is available.
Explorabilidade
Exploit
Correção
Pesquisadores
Fornecedores
Produtos afetados
Identificadores relacionados
CVE-2012-6509
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com