PT-2005-2054 · Runcms · Runcms

Pokley · Published 2005-04-09 · Updated 2017-07-11 · CVE-2005-1031

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions RUNCMS version 1.1A

Description The issue arises when the "Allow custom avatar upload" feature is enabled, allowing remote attackers to upload arbitrary files due to improper file verification.

Recommendations For RUNCMS version 1.1A, consider disabling the "Allow custom avatar upload" feature until a proper fix is implemented to verify uploaded files.

Fix

Related Identifiers

CVE-2005-1031

Affected Products

Runcms

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2005-1031 · Security Note
• http://secunia.com/advisories/14869 · Vendor Advisory
• http://securityfocus.com/bid/13027 · Patch
• http://marc.info/?l=bugtraq&m=111280711228450&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20001 · Note
• http://runcms.org/public/modules/news · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1031 · Note