CVE-2015-0877

Опубликовано: 06 апр. 2015

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Unrestricted file upload vulnerability in app/lib/mlf.pl in C-BOARD Moyuku before 1.03b3 allows remote attackers to execute arbitrary code by uploading a file with a \0 character in its name.

Комментарий

CWE-434: Unrestricted Upload of File with Dangerous Type

Ссылки

http://jvn.jp/en/jp/JVN73261710/index.html
Vendor Advisory
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000018
Vendor Advisory
http://sourceforge.jp/projects/cb-moyuku/news/
Vendor Advisory
http://jvn.jp/en/jp/JVN73261710/index.html
Vendor Advisory
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000018
Vendor Advisory
http://sourceforge.jp/projects/cb-moyuku/news/
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:c-board_moyuku_project:c-board_moyuku:*:b2:*:*:*:*:*:*

Версия до 1.03 (включая)

cpe:2.3:a:c-board_moyuku_project:c-board_moyuku:1.01:b1:*:*:*:*:*:*

cpe:2.3:a:c-board_moyuku_project:c-board_moyuku:1.01:b2:*:*:*:*:*:*

cpe:2.3:a:c-board_moyuku_project:c-board_moyuku:1.01:b3:*:*:*:*:*:*

cpe:2.3:a:c-board_moyuku_project:c-board_moyuku:1.01:b4:*:*:*:*:*:*

cpe:2.3:a:c-board_moyuku_project:c-board_moyuku:1.01:b6:*:*:*:*:*:*

cpe:2.3:a:c-board_moyuku_project:c-board_moyuku:1.02:b1:*:*:*:*:*:*

cpe:2.3:a:c-board_moyuku_project:c-board_moyuku:1.03:b1:*:*:*:*:*:*

EPSS

Процентиль: 81%

0.01588

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-hgxg-8qx8-qpcr

github

больше 3 лет назад