Lucene search
K

CVE-2015-0258

🗓️ 17 Feb 2020 17:46:29Reported by redhatType 
cve
 cve
🔗 web.nvd.nist.gov👁 77 Views🌐 WEB

Multiple incomplete blacklist vulnerabilities in avatar upload functionality in Collabtive before 2.1 allow remote authenticated users to execute arbitrary code by uploading a file with a .php3, .php4, .php5, or .phtml extension

Related
Detection
Affected
Refs
Paths
ReporterTitlePublishedViews
Family
0day.today
Collabtive 2.0 Shell Upload Vulnerability
29 Sep 201500:00
zdt
CNVD
Collabtive Code Issue Vulnerability
9 Mar 202000:00
cnvd
Cvelist
CVE-2015-0258
17 Feb 202017:46
cvelist
Debian
[SECURITY] [DLA 2125-1] collabtive security update
28 Feb 202022:26
debian
Tenable Nessus
Debian DLA-2125-1 : collabtive security update
2 Mar 202000:00
nessus
Tenable Nessus
Ubuntu 16.04 LTS : Collabtive vulnerability (USN-4590-1)
19 Oct 202000:00
nessus
NVD
CVE-2015-0258
17 Feb 202018:15
nvd
OpenVAS
Ubuntu: Security Advisory (USN-4590-1)
21 Oct 202000:00
openvas
OpenVAS
Debian: Security Advisory (DLA-2125-1)
29 Feb 202000:00
openvas
OSV
DLA-2125-1 collabtive - security update
28 Feb 202000:00
osv
Rows per page
NVD
Vulners
Node
Node
Node
[
  {
    "product": "Collabtive",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "before 2.1"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
filenamepathfiles/standard/avatar/image_nameArbitrary file upload via avatar upload bypass of file type/extension checks leading to possible code execution.CWE-434
extensionpathfiles/standard/avatar/image_nameArbitrary file upload via avatar upload bypass of file type/extension checks leading to possible code execution.CWE-434

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 02:22Current
8.8High risk
Vulners AI Score8.8
CVSS 26.5
CVSS 3.18.8
EPSS0.12936
77