Security Advisory

CVE-2011-4828

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2011-12-15 02:00:00
Last updated 2024-09-17 02:47:38
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Unrestricted file upload vulnerability in includes/inline_image_upload.php in AutoSec Tools V-CMS 1.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in temp/.