Test Kennung:	1.3.6.1.4.1.25623.1.0.19751
Kategorie:	Gain a shell remotely
Titel:	Discuz! <= 4.0.0 rc4 Arbitrary File Upload Flaw
Zusammenfassung:	According to its version, the installation of Discuz! on the remote host; fails to properly check for multiple extensions in uploaded files.
Beschreibung:	Summary: According to its version, the installation of Discuz! on the remote host fails to properly check for multiple extensions in uploaded files. Vulnerability Impact: An attacker may be able to exploit this issue to execute arbitrary commands on the remote host subject to the privileges of the web server user id, typically nobody. Solution: Upgrade to the latest version of this software. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	BugTraq ID: 14564 Common Vulnerability Exposure (CVE) ID: CVE-2005-2614 http://www.securityfocus.com/bid/14564 http://archives.neohapsis.com/archives/fulldisclosure/2005-08/0440.html http://securitytracker.com/id?1014673 http://secunia.com/advisories/16433
Copyright	Copyright (C) 2005 David Maciejak

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.