CVE-2003-0491

The CVE-2003-0491 entry affects the Tutorials 2.0 module in XOOPS and E-XOOPS. It describes a remote code execution via uploading a PHP file without an image MIME type, then directly accessing the uploaded file. This is the stated vulnerability path and impact; no remediation details are provided...

CVE-2003-0491: Undefined Security Weakness

The Tutorials 2.0 module in XOOPS and E-XOOPS allows remote attackers to execute arbitrary code by uploading a PHP file without a MIME image type, then directly accessing the uploaded file...