CVE-2005-1512

The Admin panel in PwsPHP 1.2.2 does not properly verify uploaded picture files, which allows remote attackers to upload and possibly execute arbitrary files.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2005-05-11

Last modified

2024-08-07

Affected products

• Pwsphp (Pwsphp)

References

• http://marc.info/?l=bugtraq&m=111565808024581&w=2
• http://secunia.com/advisories/15315
• http://www.osvdb.org/16236
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20508