Unrestricted file upload

2008-04-1517:05:00

PRIOn knowledge base

www.prio-n.com

8 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.9%

JSON

Unrestricted file upload vulnerability in iScripts SocialWare allows remote authenticated administrators to upload arbitrary files via a crafted logo file in the “Manage Settings” functionality. NOTE: remote exploitation is facilitated by a separate SQL injection vulnerability.

References

secunia.com/advisories/29725

www.osvdb.org/44327

www.securityfocus.com/bid/28670

www.vupen.com/english/advisories/2008/1137/references

exchange.xforce.ibmcloud.com/vulnerabilities/41751

www.exploit-db.com/exploits/5402