Lucene search
HistoryMay 02, 2005 - 4:00 a.m.
CVE-2005-1031
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
7 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
69.8%
RUNCMS 1.1A, and possibly other products based on e-Xoops (exoops), when “Allow custom avatar upload” is enabled, does not properly verify uploaded files, which allows remote attackers to upload arbitrary files.
Affected configurations
Node
e-xoopse-xoopsMatch1.05r3
ORruncmsruncmsMatch1.1
ORruncmsruncmsMatch1.1a
Related
nessus
nessus
RunCMS Remote Arbitrary File Upload
2005-04-06 00:00:00
cve
cve
CVE-2005-1031
2005-05-02 04:00:00
cvelist
cvelist
CVE-2005-1031
2005-04-09 04:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
7 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
69.8%
Related for NVD:CVE-2005-1031