PT-2007-5912 · Barbo91 · Barbo91

Publicado 2007-09-08 · Atualizado 2008-11-15 · CVE-2007-4761

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Barbo91 version 1.1

Description: The issue concerns an unrestricted file upload vulnerability in the upload.php file, allowing remote attackers to upload and execute arbitrary code. The exact vectors used for the attack are not specified.

Recommendations: For Barbo91 version 1.1, consider restricting access to the upload.php file to prevent arbitrary code execution until a fix is available. As a temporary workaround, disabling the file upload functionality in upload.php can help minimize the risk of exploitation.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2007-4761

Produtos afetados

Barbo91

Referências · 3

• http://osvdb.org/45876 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-4761 · Nota de Segurança
• http://securityfocus.com/bid/25551 · Nota