ID de Prueba:	1.3.6.1.4.1.25623.1.0.901091
Categoría:	Web application abuses
Título:	Serendipity File Extension Processing Arbitrary File Upload Vulnerability
Resumen:	Serendipity is prone to arbitrary file upload vulnerability.
Descripción:	Summary: Serendipity is prone to arbitrary file upload vulnerability. Vulnerability Insight: The flaw is due to an input validation error in the file upload functionality when processing a file with a filename containing multiple file extensions. Vulnerability Impact: Successful exploitation will allow attacker to upload PHP scripts and execute arbitrary commands on a web server with a specific configuration. Affected Software/OS: Serendipity version prior to 1.5 on all platforms. Solution: Upgrade to Serendipity version 1.5 or later. CVSS Score: 6.0 CVSS Vector: AV:N/AC:M/Au:S/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2009-4412 http://www.openwall.com/lists/oss-security/2009/12/21/1 http://osvdb.org/61245 http://secunia.com/advisories/37830 http://www.vupen.com/english/advisories/2009/3626 XForce ISS Database: serendipity-unspecified-file-upload(54985) https://exchange.xforce.ibmcloud.com/vulnerabilities/54985
Copyright	Copyright (C) 2010 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.