PT-2007-6721 · Seeblick · Seeblick

Xcross87 · Published 2007-10-30 · Updated 2018-10-15 · CVE-2007-5736

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions SeeBlick version 1.0 Beta

Description The issue concerns an unrestricted file upload vulnerability in the upload.php file. This allows remote attackers to upload arbitrary files, which are stored with .html extensions. The scope of the attack might be limited to resource consumption and possibly cross-site scripting (XSS).

Recommendations For SeeBlick version 1.0 Beta, consider restricting or disabling the upload functionality in upload.php until a proper fix is available to prevent arbitrary file uploads. As a temporary workaround, restrict access to the upload.php file to minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2007-5736

Affected Products

Seeblick

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2007-5736 · Security Note
• http://securityfocus.com/archive/1/482674/100/0/threaded · Note
• http://securityreason.com/securityalert/3324 · Note
• http://osvdb.org/38922 · Note