PT-2005-2054 · Runcms · Runcms

Pokley · Publicado 2005-04-09 · Atualizado 2017-07-11 · CVE-2005-1031

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions RUNCMS version 1.1A

Description The issue arises when the "Allow custom avatar upload" feature is enabled, allowing remote attackers to upload arbitrary files due to improper file verification.

Recommendations For RUNCMS version 1.1A, consider disabling the "Allow custom avatar upload" feature until a proper fix is implemented to verify uploaded files.

Correção

Identificadores relacionados

CVE-2005-1031

Produtos afetados

Runcms

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2005-1031 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=111280711228450&w=2 · Nota
• http://secunia.com/advisories/14869 · Aviso do Fabricante
• http://securityfocus.com/bid/13027 · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20001 · Nota
• http://runcms.org/public/modules/news · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1031 · Nota