PT-2005-2508 · Pwsphp · Pwsphp

Froggz · Publicado 2005-05-11 · Atualizado 2017-07-11 · CVE-2005-1512

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PwsPHP version 1.2.2

Description The issue concerns the Admin panel in PwsPHP, which fails to properly verify uploaded picture files. This allows remote attackers to upload and possibly execute arbitrary files.

Recommendations For PwsPHP version 1.2.2, consider implementing proper file verification for uploaded picture files to prevent remote attackers from uploading and executing arbitrary files. As a temporary workaround, restrict access to the file upload functionality in the Admin panel until a proper fix is applied.

Correção

Identificadores relacionados

CVE-2005-1512

Produtos afetados

Pwsphp

Referências · 5

• http://osvdb.org/16236 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20508 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-1512 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=111565808024581&w=2 · Nota
• http://secunia.com/advisories/15315 · Aviso do Fabricante