CVE Database
/

CVE-2005-1957

Back to search

CVE-2005-1957

Published: Jun 14, 2005

Modified: Aug 7, 2024

PUBLISHED

Description

mtnpeak.net File Upload Manager does not properly check user authentication for certain actions, which allows remote attackers to provide a modified base64-encoded file parameter and (1) read arbitrary files via the "view" action or (2) delete arbitrary files via the del action.

VendorProductVersions

n/a

n/a

affected
n/a

References

17435
vdb-entry
x_refsource_OSVDB
20050615 Re: File Upload Manager Sploits
mailing-list
x_refsource_BUGTRAQ
20050612 File Upload Manager Sploits
mailing-list
x_refsource_BUGTRAQ
20258
vdb-entry
x_refsource_OSVDB

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now