← back
CVE-2006-3158

CVE-2006-3158

EPSS 3.1%
index.php in Eduha Meeting does not properly restrict file extensions before permitting a file upload, which allows remote attackers to bypass security checks and upload or execute arbitrary php code via the add action.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/28058unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://secunia.com/advisories/20731https://exchange.xforce.ibmcloud.com/vulnerabilities/27296http://www.biyosecurity.be/bugs/meeting.txthttp://www.osvdb.org/26627http://www.securityfocus.com/archive/1/437992/100/0/threadedhttp://www.securityfocus.com/bid/18499http://www.vupen.com/english/advisories/2006/2428