Unrestricted file upload

2010-02-2700:30:00

PRIOn knowledge base

www.prio-n.com

7.8 High

AI Score

Confidence

Low

0.01 Low

EPSS

Percentile

83.7%

JSON

Unrestricted file upload vulnerability in index.php/Attach in WikyBlog 1.7.3rc2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension using the uploadform action, then accessing it via a direct request to the file in userfiles/[username]/uploaded/.

CPENameOperatorVersion
wikyblogeq1.7.3 rc2

CPE	Name	Operator	Version
	wikyblog	eq	1.7.3 rc2

References

osvdb.org/62648

packetstormsecurity.org/1002-exploits/wikyblog-rfishellxss.txt

www.securityfocus.com/bid/38386

exchange.xforce.ibmcloud.com/vulnerabilities/56517

www.exploit-db.com/exploits/11560