Lucene search
MitreCVE-2011-0678HistoryJan 28, 2011 - 9:00 p.m.
CVE-2011-0678
2011-01-2821:00:30
mitre
web.nvd.nist.gov
28
cve-2011-0678
unrestricted file upload
lomtec activeweb professional 3.0
remote code execution
easyedit module
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
8
Confidence
Low
EPSS
0.285
Percentile
96.9%
Unrestricted file upload vulnerability in the EasyEdit module in Lomtec ActiveWeb Professional 3.0 allows remote attackers to execute arbitrary code by uploading an executable file via the UploadDirectory and Accepted Extensions fields in the getImagefile component of EasyEdit.cfm.
Affected configurations
Node
lomtecactivewebMatch3.0professional
Related
cvelist
cvelist
CVE-2011-0678
2011-01-28 20:29:00
prion
prion
Unrestricted file upload
2011-01-28 21:00:00
exploitdb
exploitdb
ActiveWeb Professional 3.0 - Arbitrary File Upload
2011-01-25 00:00:00
nvd
nvd
CVE-2011-0678
2011-01-28 21:00:30
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
8
Confidence
Low
EPSS
0.285
Percentile
96.9%
Related for CVE-2011-0678