CVE-2005-4423

Unrestricted file upload vulnerability in PHPFM before 0.2.3 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension to an accessible directory, as demonstrated using a file with a .php extension, aka "upload phpshell."

Score
CVSS 2.0 6.5 Medium
Status
Modified - cve@mitre.org
Published
2005-12-20
Last modified
2024-09-17

References

 
 
© AVABIS GmbH privacypolicy about