PT-2007-4258 · Filecloset · Filecloset

Published 2007-05-31 · Updated 2017-07-29 · CVE-2007-2961

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions FileCloset versions prior to 1.1.5

Description The issue allows remote attackers to upload arbitrary PHP files, potentially leading to unauthorized access or code execution.

Recommendations For versions prior to 1.1.5, update to version 1.1.5 or later to resolve the issue. As a temporary workaround, consider restricting file upload capabilities to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2007-2961

Affected Products

Filecloset

References · 7

• http://securityfocus.com/bid/24228 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2007-2961 · Security Note
• http://sourceforge.net/project/shownotes.php?group_id=185741&release_id=512101 · Patch
• http://secunia.com/advisories/25459 · Vendor Advisory
• http://osvdb.org/36738 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34587 · Note
• http://sourceforge.net/forum/forum.php?forum_id=700075 · Note