Beveiligingsadvies

CVE-2008-3592

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2008-08-11 23:00:00

Laatst bijgewerkt 2024-08-07 09:45:18

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

Unrestricted file upload vulnerability in the File Manager in the admin panel in Twentyone Degrees Symphony 1.7.01 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension to a directory specified in the destination parameter, then accessing the uploaded file via a direct request, as demonstrated using workspace/masters/.

← Alle CVE's bekijken Bekijk op cve.org ↗