PT-2005-2508 · Pwsphp · Pwsphp

Froggz · Published 2005-05-11 · Updated 2017-07-11 · CVE-2005-1512

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PwsPHP version 1.2.2

Description The issue concerns the Admin panel in PwsPHP, which fails to properly verify uploaded picture files. This allows remote attackers to upload and possibly execute arbitrary files.

Recommendations For PwsPHP version 1.2.2, consider implementing proper file verification for uploaded picture files to prevent remote attackers from uploading and executing arbitrary files. As a temporary workaround, restrict access to the file upload functionality in the Admin panel until a proper fix is applied.

Fix

Related Identifiers

CVE-2005-1512

Affected Products

Pwsphp

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2005-1512 · Security Note
• http://secunia.com/advisories/15315 · Vendor Advisory
• http://osvdb.org/16236 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20508 · Note
• http://marc.info/?l=bugtraq&m=111565808024581&w=2 · Note