CVE-2011-4828 | BDVDB-2026-48479 Detail

Description#

Unrestricted file upload vulnerability in includes/inline_image_upload.php in AutoSec Tools V-CMS 1.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in temp/.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/50706
http://bugs.v-cms.org/view.php?id=53
http://www.autosectools.com/Advisory/V-CMS-1.0-Arbitrary-Upload-236
http://bugs.v-cms.org/changelog_page.php
http://secunia.com/advisories/46861

Exploit#

No public exploit known

History#

Version 12011-12-15Record published in the CVE List.
Version 22024-09-17Most recent update recorded in the CVE List.