PT-2007-4258 · Filecloset · Filecloset

Publicado 2007-05-31 · Atualizado 2017-07-29 · CVE-2007-2961

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions FileCloset versions prior to 1.1.5

Description The issue allows remote attackers to upload arbitrary PHP files, potentially leading to unauthorized access or code execution.

Recommendations For versions prior to 1.1.5, update to version 1.1.5 or later to resolve the issue. As a temporary workaround, consider restricting file upload capabilities to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2007-2961

Produtos afetados

Filecloset

Referências · 7

• http://osvdb.org/36738 · Nota
• http://securityfocus.com/bid/24228 · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34587 · Nota
• http://sourceforge.net/forum/forum.php?forum_id=700075 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2961 · Nota de Segurança
• http://sourceforge.net/project/shownotes.php?group_id=185741&release_id=512101 · Correção
• http://secunia.com/advisories/25459 · Aviso do Fabricante