Attachment Mod 2.3.10 module for phpBB, when used with Apache mod_mime, does not properly handle files with multiple file extensions, such as .php.rar, which allows remote attackers to upload and execute arbitrary code.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2004-12-31 05:00
Updated : 2024-02-28 10:24
NVD link : CVE-2004-1404
Mitre link : CVE-2004-1404
CVE.ORG link : CVE-2004-1404
JSON object : View
Products Affected
opentools
- attachment_mod
CWE