PT-2007-2556 · Mtcms · Mtcms

Published 2007-02-27 · Updated 2018-10-16 · CVE-2007-1129

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MTCMS version 3.2

Description The issue allows remote attackers to upload and execute files due to unrestricted file upload vulnerabilities. This can be achieved via an avatar upload in an add down action or an add link action.

Recommendations For MTCMS version 3.2, consider restricting or disabling the file upload functionality in the add down and add link actions until a patch is available. Additionally, restrict access to the affected areas to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2007-1129

Affected Products

Mtcms

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2007-1129 · Security Note
• http://vupen.com/english/advisories/2007/0755 · Vendor Advisory
• http://securityfocus.com/bid/22690 · Note
• http://osvdb.org/33778 · Note
• http://securityfocus.com/archive/1/461330/100/100/threaded · Note