Meilad File upload script (up.php) mod for phpBB 2.0.x does not properly limit the types of files that can be uploaded, which allows remote authenticated users to execute arbitrary commands by uploading PHP files, then directly requesting them from the uploads directory.
References
Link | Resource |
---|---|
http://marc.info/?l=bugtraq&m=111299353030534&w=2 | |
http://securitytracker.com/id?1013671 | Vendor Advisory |
http://www.defacers.com.mx/advisories/2.txt | URL Repurposed |
http://marc.info/?l=bugtraq&m=111299353030534&w=2 | |
http://securitytracker.com/id?1013671 | Vendor Advisory |
http://www.defacers.com.mx/advisories/2.txt | URL Repurposed |
Configurations
Configuration 1 (hide)
|
History
20 Nov 2024, 23:56
Type | Values Removed | Values Added |
---|---|---|
References | () http://marc.info/?l=bugtraq&m=111299353030534&w=2 - | |
References | () http://securitytracker.com/id?1013671 - Vendor Advisory | |
References | () http://www.defacers.com.mx/advisories/2.txt - URL Repurposed |
14 Feb 2024, 01:17
Type | Values Removed | Values Added |
---|---|---|
References | (MISC) http://www.defacers.com.mx/advisories/2.txt - URL Repurposed |
Information
Published : 2005-04-07 04:00
Updated : 2024-11-20 23:56
NVD link : CVE-2005-1047
Mitre link : CVE-2005-1047
CVE.ORG link : CVE-2005-1047
JSON object : View
Products Affected
phpbb_group
- phpbb
CWE