CVE-2007-5401

Unrestricted file upload vulnerability in uploadrequest.asp in Layton HelpBox 3.7.1 allows remote authenticated users to upload and execute arbitrary ASP files, related to not properly checking file extensions.

Score

CVSS 2.0 6.5 Medium

Status

Modified - PSIRT-CNA@flexerasoftware.com

Published

2008-01-09

Last modified

2024-08-07

Weaknesses

CWE-264

Affected products

• Helpbox (Layton Technology)

References

• http://secunia.com/advisories/27699
• http://secunia.com/secunia_research/2007-94/advisory/
• http://www.securityfocus.com/bid/27187
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39536