Lucene search
HistoryJan 28, 2011 - 9:00 p.m.
CVE-2011-0678
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.7
Confidence
Low
EPSS
0.285
Percentile
96.9%
Unrestricted file upload vulnerability in the EasyEdit module in Lomtec ActiveWeb Professional 3.0 allows remote attackers to execute arbitrary code by uploading an executable file via the UploadDirectory and Accepted Extensions fields in the getImagefile component of EasyEdit.cfm.
Affected configurations
Node
lomtecactivewebMatch3.0professional
Related
cvelist
cvelist
CVE-2011-0678
2011-01-28 20:29:00
prion
prion
Unrestricted file upload
2011-01-28 21:00:00
cve
cve
CVE-2011-0678
2011-01-28 21:00:30
exploitdb
exploitdb
ActiveWeb Professional 3.0 - Arbitrary File Upload
2011-01-25 00:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.7
Confidence
Low
EPSS
0.285
Percentile
96.9%
Related for NVD:CVE-2011-0678