Description

ImageManager in e107 before 0.617 does not properly check the types of uploaded files, which allows remote attackers to execute arbitrary code by uploading a PHP file via the upload parameter to images.php.

Remediation

References

CVE-2004-2262

Related Vulnerabilities

XWiki CVE-2023-26473 Vulnerability (CVE-2023-26473)

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2019-9641)

ClipBucket Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2018-7666)

WordPress Plugin VIDEO GALLERY 'upload1.php' Arbitrary File Upload (1.3)

Oracle Database Server Other Vulnerability (CVE-2002-1767)

Severity

Medium

Classification

CVE-2004-2262

Tags

Missing Update Known Vulnerabilities