Back to search
CVE-2005-0743
Published: Mar 13, 2005
Modified: Aug 7, 2024
PUBLISHED
Description
The custom avatar uploading feature (uploader.php) for XOOPS 2.0.9.2 and earlier allows remote attackers to upload arbitrary PHP scripts, whose file extensions are not filtered.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
14520
third-party-advisory
x_refsource_SECUNIA
http://www.xoops.org/modules/news/article.php?storyid=2114
x_refsource_CONFIRM
20050308 [SCAN Associates Security Advisory] xoops 2.0.9.2 and below weak file extension validation
mailing-list
x_refsource_BUGTRAQ
12754
vdb-entry
x_refsource_BID
xoops-uploader-file-upload(19634)
vdb-entry
x_refsource_XF
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now