CVE-2011-2585

Cisco Show and Share 52, 5.21, and 5.22 before 5.22.1 allows remote authenticated users to upload and execute arbitrary code by leveraging video upload privileges, aka Bug ID CSCto69857...

CVE-2011-2585

Cisco Show and Share (5.2(2) and earlier) is vulnerable to CVE-2011-2585 where an authenticated user with video-upload privileges can upload code that executes with the web server’s non-root privileges. Cisco’s advisory (CSCto69857) states the fix is in 5.2(2.1) or later; upgrade to a release equ...