Description (CNA)
addresses.php3 in MyPhPim 01.05 does not restrict uploaded files, which allows remote attackers to execute arbitrary PHP code via the pdbfile variable, then directly accessing those files from the uploads directory.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://evuln.com/vulns/23/summary.html
- http://www.securityfocus.com/bid/16208
- http://secunia.com/advisories/18399
- http://www.securityfocus.com/archive/1/421626/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24070
- http://www.vupen.com/english/advisories/2006/0147
ADP enrichment
No English description supplied.