2 matches found
CVE-2010-0757
WikyBlog 1.7.3rc2 is affected by an unrestricted file upload vulnerability in index.php/Attach. An authenticated user can upload a file with an executable extension via the uploadform action and then access it directly in userfiles/[username]/uploaded/ to execute arbitrary code. The root cause is...
CVE-2010-0757
creationtimestamp| type| source ---|---|--- 2010-02-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11560...