CVE-2007-5071
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 3.0%
Incomplete blacklist vulnerability in upload_img_cgi.php in Simple PHP Blog before 0.5.1 allows remote attackers to upload dangerous files and execute arbitrary code, as demonstrated by a filename ending in .php. or a .htaccess file, a different vector than CVE-2005-2733. NOTE: the vulnerability was also present in a 0.5.1 download available in the early morning of 20070923. NOTE: the original 20070920 disclosure provided an incorrect filename, img_upload_cgi.php.
Produtos afetados
n/a · n/aReferências
http://secunia.com/advisories/26968https://exchange.xforce.ibmcloud.com/vulnerabilities/36785http://www.securenetwork.it/ricerca/advisory/download/SN-2007-03.txthttp://www.securityfocus.com/archive/1/480092/100/0/threadedhttp://www.securityfocus.com/archive/1/480569/100/0/threadedhttp://www.securityfocus.com/bid/25747http://www.simplephpblog.com/comments.php?y=07&m=09&entry=entry070923-004446http://www.simplephpblog.com/index.php?m=09&y=07