PT-2007-5912 · Barbo91 · Barbo91

Published 2007-09-08 · Updated 2008-11-15 · CVE-2007-4761

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Barbo91 version 1.1

Description: The issue concerns an unrestricted file upload vulnerability in the upload.php file, allowing remote attackers to upload and execute arbitrary code. The exact vectors used for the attack are not specified.

Recommendations: For Barbo91 version 1.1, consider restricting access to the upload.php file to prevent arbitrary code execution until a fix is available. As a temporary workaround, disabling the file upload functionality in upload.php can help minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2007-4761

Affected Products

Barbo91

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2007-4761 · Security Note
• http://osvdb.org/45876 · Note
• http://securityfocus.com/bid/25551 · Note