ID de Prueba:	1.3.6.1.4.1.25623.1.0.19751
Categoría:	Gain a shell remotely
Título:	Discuz! <= 4.0.0 rc4 Arbitrary File Upload Flaw
Resumen:	According to its version, the installation of Discuz! on the remote host; fails to properly check for multiple extensions in uploaded files.
Descripción:	Summary: According to its version, the installation of Discuz! on the remote host fails to properly check for multiple extensions in uploaded files. Vulnerability Impact: An attacker may be able to exploit this issue to execute arbitrary commands on the remote host subject to the privileges of the web server user id, typically nobody. Solution: Upgrade to the latest version of this software. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2005-2614 BugTraq ID: 14564 http://www.securityfocus.com/bid/14564 http://archives.neohapsis.com/archives/fulldisclosure/2005-08/0440.html http://securitytracker.com/id?1014673 http://secunia.com/advisories/16433
Copyright	Copyright (C) 2005 David Maciejak

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.