CVE-2008-5677

Опубликовано: 19 дек. 2008

Источник: nvd

CVSS2: 7.1

EPSS Низкий

Описание

Unrestricted file upload vulnerability in Kwalbum 2.0.4, 2.0.2, and earlier, when PICS_PATH is located in the web root, allows remote authenticated users with upload capability to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file under items/, related to the ReplaceBadFilenameChars function in include/ItemAdder.php. NOTE: some of these details are obtained from third party information.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:kwalbum:kwalbum:*:*:*:*:*:*:*:*

Версия до 2.0.2 (включая)

cpe:2.3:a:kwalbum:kwalbum:0.5.1:*:*:*:*:*:*:*

cpe:2.3:a:kwalbum:kwalbum:0.5.2:*:*:*:*:*:*:*

cpe:2.3:a:kwalbum:kwalbum:0.5.3:*:*:*:*:*:*:*

cpe:2.3:a:kwalbum:kwalbum:0.5.4:*:*:*:*:*:*:*

cpe:2.3:a:kwalbum:kwalbum:0.5.6:*:*:*:*:*:*:*

cpe:2.3:a:kwalbum:kwalbum:0.5.7:*:*:*:*:*:*:*

cpe:2.3:a:kwalbum:kwalbum:0.5.8:*:*:*:*:*:*:*

cpe:2.3:a:kwalbum:kwalbum:0.5.9:*:*:*:*:*:*:*

cpe:2.3:a:kwalbum:kwalbum:0.5.10:*:*:*:*:*:*:*

cpe:2.3:a:kwalbum:kwalbum:0.5.11:*:*:*:*:*:*:*

cpe:2.3:a:kwalbum:kwalbum:0.5.12:*:*:*:*:*:*:*

cpe:2.3:a:kwalbum:kwalbum:0.6.0:*:*:*:*:*:*:*

cpe:2.3:a:kwalbum:kwalbum:0.6.1:*:*:*:*:*:*:*

cpe:2.3:a:kwalbum:kwalbum:0.6.4:*:*:*:*:*:*:*

cpe:2.3:a:kwalbum:kwalbum:0.6.5:*:*:*:*:*:*:*

cpe:2.3:a:kwalbum:kwalbum:0.6.6:*:*:*:*:*:*:*

cpe:2.3:a:kwalbum:kwalbum:0.6.7:*:*:*:*:*:*:*

cpe:2.3:a:kwalbum:kwalbum:0.6.8:*:*:*:*:*:*:*

cpe:2.3:a:kwalbum:kwalbum:0.6.9:*:*:*:*:*:*:*

cpe:2.3:a:kwalbum:kwalbum:0.6.10:*:*:*:*:*:*:*

cpe:2.3:a:kwalbum:kwalbum:0.6.11:*:*:*:*:*:*:*

cpe:2.3:a:kwalbum:kwalbum:0.6.12:*:*:*:*:*:*:*

cpe:2.3:a:kwalbum:kwalbum:0.6.13:*:*:*:*:*:*:*

cpe:2.3:a:kwalbum:kwalbum:0.6.14:*:*:*:*:*:*:*

cpe:2.3:a:kwalbum:kwalbum:0.6.15:*:*:*:*:*:*:*

cpe:2.3:a:kwalbum:kwalbum:0.6.16:*:*:*:*:*:*:*

cpe:2.3:a:kwalbum:kwalbum:0.7.0:*:*:*:*:*:*:*

cpe:2.3:a:kwalbum:kwalbum:0.7.1:*:*:*:*:*:*:*

cpe:2.3:a:kwalbum:kwalbum:0.8.0:*:*:*:*:*:*:*

cpe:2.3:a:kwalbum:kwalbum:0.9.0:*:*:*:*:*:*:*

cpe:2.3:a:kwalbum:kwalbum:0.9.1:*:*:*:*:*:*:*

cpe:2.3:a:kwalbum:kwalbum:0.9.2:*:*:*:*:*:*:*

cpe:2.3:a:kwalbum:kwalbum:0.9.3:*:*:*:*:*:*:*

cpe:2.3:a:kwalbum:kwalbum:0.9.4:*:*:*:*:*:*:*

cpe:2.3:a:kwalbum:kwalbum:1.0:*:*:*:*:*:*:*

cpe:2.3:a:kwalbum:kwalbum:2.0:*:*:*:*:*:*:*

cpe:2.3:a:kwalbum:kwalbum:2.0.1:*:*:*:*:*:*:*

cpe:2.3:a:kwalbum:kwalbum:2.0.4:*:*:*:*:*:*:*

EPSS

Процентиль: 87%

0.03606

Низкий

7.1 High

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-4qjx-xgwc-8hg7

github

больше 3 лет назад