Back to search
CVE-2005-2699
Published: Aug 25, 2005
Modified: Aug 7, 2024
PUBLISHED
Description
Unrestricted file upload vulnerability in admin/admin.php in PHPKit 1.6.1 allows remote authenticated administrators to execute arbitrary PHP code by uploading a .php file to the content/images/ directory using images.php. NOTE: if a PHPKit administrator must already have access to the end system to install or modify configuration of the product, then this issue might not cross privilege boundaries, and should not be included in CVE.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
20050822 SQL Injection and PHP Code Injection Vulnerabilities in PHPKit 1.6.1
mailing-list
x_refsource_BUGTRAQ
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now