PT-2007-2933 · Phpx · Phpx

Publicado 2007-03-20 · Atualizado 2018-10-16 · CVE-2007-1549

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions phpx version 3.5.15

Description The issue allows remote attackers to upload and execute arbitrary PHP scripts via an addImage action in the gallery.php file. This action places the uploaded scripts into the gallery/shelties/ directory.

Recommendations For phpx version 3.5.15, consider restricting access to the gallery.php file or disabling the addImage action to prevent the upload and execution of arbitrary PHP scripts until a patch is available.

Correção

Identificadores relacionados

CVE-2007-1549

Produtos afetados

Phpx

Referências · 5

• http://securityfocus.com/archive/1/463192/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33151 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-1549 · Nota de Segurança
• http://securityreason.com/securityalert/2457 · Nota
• http://securityfocus.com/bid/23033 · Nota