PT-2007-6721 · Seeblick · Seeblick

Xcross87 · Publicado 2007-10-30 · Atualizado 2018-10-15 · CVE-2007-5736

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions SeeBlick version 1.0 Beta

Description The issue concerns an unrestricted file upload vulnerability in the upload.php file. This allows remote attackers to upload arbitrary files, which are stored with .html extensions. The scope of the attack might be limited to resource consumption and possibly cross-site scripting (XSS).

Recommendations For SeeBlick version 1.0 Beta, consider restricting or disabling the upload functionality in upload.php until a proper fix is available to prevent arbitrary file uploads. As a temporary workaround, restrict access to the upload.php file to minimize the risk of exploitation.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2007-5736

Produtos afetados

Seeblick

Referências · 4

• http://securityfocus.com/archive/1/482674/100/0/threaded · Nota
• http://securityreason.com/securityalert/3324 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-5736 · Nota de Segurança
• http://osvdb.org/38922 · Nota