Beveiligingsadvies

CVE-2008-6914

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2009-08-07 18:33:00

Laatst bijgewerkt 2024-08-07 11:49:02

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

Unrestricted file upload vulnerability in viewprofile.php in Zeeways ZEEPROPERTY 1.0 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a photo in a profile modification, then accessing a related file via a direct request to the file in companylogo/.

← Alle CVE's bekijken Bekijk op cve.org ↗