7.5

CVE-2004-1404

Attachment Mod 2.3.10 module for phpBB, when used with Apache mod_mime, does not properly handle files with multiple file extensions, such as .php.rar, which allows remote attackers to upload and execute arbitrary code.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Opentools ≫ Attachment Mod Version 2.3.4
Opentools ≫ Attachment Mod Version 2.3.5
Opentools ≫ Attachment Mod Version 2.3.6
Opentools ≫ Attachment Mod Version 2.3.7
Opentools ≫ Attachment Mod Version 2.3.8
Opentools ≫ Attachment Mod Version 2.3.9
Opentools ≫ Attachment Mod Version 2.3.10
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.92% 0.852
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/13421/
Patch
http://www.securityfocus.com/bid/11893
Patch
http://marc.info/?l=bugtraq&m=110321557806215&w=2
http://www.opentools.de/board/viewtopic.php?t=3590
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/18438