CVE-2010-1514

Опубликовано: 15 июн. 2010

Источник: nvd

CVSS2: 6

EPSS Низкий

Описание

Unrestricted file upload vulnerability in TomatoCMS 2.0.6 and earlier allows remote authenticated users, with certain privileges, to execute arbitrary PHP code by uploading an image file, and then accessing it via a direct request to the file in an unspecified directory.

Ссылки

http://holisticinfosec.org/content/view/148/45/
http://secunia.com/advisories/39680
Vendor Advisory
http://secunia.com/secunia_research/2010-57/
Vendor Advisory
http://www.securityfocus.com/bid/40544
http://holisticinfosec.org/content/view/148/45/
http://secunia.com/advisories/39680
Vendor Advisory
http://secunia.com/secunia_research/2010-57/
Vendor Advisory
http://www.securityfocus.com/bid/40544

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:tomatocms:tomatocms:*:*:*:*:*:*:*:*

Версия до 2.0.6 (включая)

cpe:2.3:a:tomatocms:tomatocms:2.0.0:*:*:*:*:*:*:*

cpe:2.3:a:tomatocms:tomatocms:2.0.1:*:*:*:*:*:*:*

cpe:2.3:a:tomatocms:tomatocms:2.0.2:*:*:*:*:*:*:*

cpe:2.3:a:tomatocms:tomatocms:2.0.3:*:*:*:*:*:*:*

cpe:2.3:a:tomatocms:tomatocms:2.0.3.1430:*:*:*:*:*:*:*

cpe:2.3:a:tomatocms:tomatocms:2.0.3.1622:*:*:*:*:*:*:*

cpe:2.3:a:tomatocms:tomatocms:2.0.4:*:*:*:*:*:*:*

cpe:2.3:a:tomatocms:tomatocms:2.0.5:*:*:*:*:*:*:*

EPSS

Процентиль: 64%

0.00466

Низкий

6 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-mggq-95w2-3hx4

github

больше 3 лет назад