Beveiligingsadvies

CVE-2011-2745

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2011-07-27 01:29:00

Laatst bijgewerkt 2024-08-06 23:08:24

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

upload_handler.php in the swfupload extension in Chyrp 2.0 and earlier relies on client-side JavaScript code to restrict the file extensions of uploaded files, which allows remote authenticated users to upload a .php file, and consequently execute arbitrary PHP code, via a write_post action to the default URI under admin/.

← Alle CVE's bekijken Bekijk op cve.org ↗