CVE-2006-6570

Unrestricted file upload vulnerability in upload.php in GenesisTrader 1.0 allows remote authenticated users to upload arbitrary files via unspecified vectors, possibly involving form.php and the ajoutfich "foap" action.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2006-12-15

Last modified

2024-08-07

Affected products

• Genesistrader (Genesistrader)

References

• http://securityreason.com/securityalert/2035
• http://www.securityfocus.com/archive/1/454385/100/0/threaded
• http://www.securityfocus.com/bid/21595
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30889