10

CVE-2007-1097

Unrestricted file upload vulnerability in the onAttachFiles function in the upload tool (inc/lib/attachment.lib.php) in Wiclear before 0.11.1 allows remote attackers to upload and execute arbitrary PHP code via unspecified vectors related to filename validation.  NOTE: some details were obtained from third party information.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Wiclear ≫ Wiclear Version <= 0.11
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.24% 0.805
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://wiclear.free.fr/?Download
http://osvdb.org/33598
http://secunia.com/advisories/24286
Vendor Advisory
http://www.vupen.com/english/advisories/2007/0792
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/32757