Secunia Logo  


Secunia PSI WorldMap
 
CVE Reference: CVE-2008-1790
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2008-1790

Description:
Unrestricted file upload vulnerability in iScripts SocialWare allows remote authenticated administrators to upload arbitrary files via a crafted logo file in the "Manage Settings" functionality. NOTE: remote exploitation is facilitated by a separate SQL injection vulnerability.

CVE Status:
Candidate

References:

XF
  http://xforce.iss.net/xforce/xfdb/41751

SAID
  Secunia Advisory: SA29725

OSVDB
  44327

MILW0RM
  http://www.milw0rm.com/exploits/5402

BID
  28670


Return to the previous page.