CVE-2005-4171

Опубликовано: 11 дек. 2005

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

The "Upload new image" command in the "Manage Images" eFiction 1.1, when members are allowed to upload images, allows remote attackers to execute arbitrary PHP code by uploading a filename with a .php extension that contains a GIF header, which passes the image validity check but executes any PHP code within the file.

Ссылки

http://archives.neohapsis.com/archives/bugtraq/2005-11/0301.html
Exploit
Vendor Advisory
http://rgod.altervista.org/efiction2_xpl.html
Exploit
Vendor Advisory
http://secunia.com/advisories/17777
Exploit
Vendor Advisory
http://securitytracker.com/id?1015273
Exploit
http://www.efiction.wallflowergirl.com/forums/viewtopic.php?t=1555
http://www.osvdb.org/21124
http://www.securityfocus.com/bid/15568
Exploit
http://archives.neohapsis.com/archives/bugtraq/2005-11/0301.html
Exploit
Vendor Advisory
http://rgod.altervista.org/efiction2_xpl.html
Exploit
Vendor Advisory
http://secunia.com/advisories/17777
Exploit
Vendor Advisory
http://securitytracker.com/id?1015273
Exploit
http://www.efiction.wallflowergirl.com/forums/viewtopic.php?t=1555
http://www.osvdb.org/21124
http://www.securityfocus.com/bid/15568
Exploit

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:efiction_project:efiction:1.1:*:*:*:*:*:*:*

EPSS

Процентиль: 92%

0.07795

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-8r83-7qrm-rvxc

github

почти 4 года назад