Unrestricted file upload

2009-01-3019:30:00

PRIOn knowledge base

www.prio-n.com

7.8 High

AI Score

Confidence

Low

0.014 Low

EPSS

Percentile

86.5%

JSON

Unrestricted file upload vulnerability in index.php in Miltenovik Manojlo MemHT Portal 4.0.1 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension and an image content type via a users editProfile action, then accessing this file via a direct request to the file in images/avatar/uploaded/.

CPENameOperatorVersion
memht_portaleq3.1 update
memht_portaleq3.0 update
memht_portalle4.0.1
memht_portaleq2.9 full
memht_portaleq1.0 final
memht_portaleq3.1
memht_portaleq3.8.0
memht_portaleq1.5 full
memht_portaleq1.5 update
memht_portaleq2.5 update

Name	Operator	Version
memht_portal	eq	3.1 update
memht_portal	eq	3.0 update
memht_portal	le	4.0.1
memht_portal	eq	2.9 full
memht_portal	eq	1.0 final
memht_portal	eq	3.1
memht_portal	eq	3.8.0
memht_portal	eq	1.5 full
memht_portal	eq	1.5 update
memht_portal	eq	2.5 update

Rows per page:

1-10 of 331

References

secunia.com/advisories/33626

www.securityfocus.com/bid/33424

exchange.xforce.ibmcloud.com/vulnerabilities/48199

www.exploit-db.com/exploits/7859