CVE-2004-2690

Unrestricted file upload vulnerability in the Administration Panel for NewsPHP allows remote authenticated administrators to upload and execute arbitrary code instead of video files.

Score

CVSS 2.0 8.5 High

Status

Modified - cve@mitre.org

Published

2004-12-31

Last modified

2024-08-08

Affected products

• Newsphp (Newsphp)

References

• http://archives.neohapsis.com/archives/bugtraq/2004-04/0161.html
• http://securitytracker.com/alerts/2004/Apr/1009740.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15838