medium6.5Public exploit code
CVE-2006-2899
Unspecified vulnerability in ESTsoft InternetDISK versions before 2006/04/20 allows remote authenticated users to execute arbitrary code, possibly by uploading…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ESTsoft InternetDisk - Arbitrary File Upload / Script Execution2006-06-05 · webapps · php · Verified
Impact
Unspecified vulnerability in ESTsoft InternetDISK versions before 2006/04/20 allows remote authenticated users to execute arbitrary code, possibly by uploading a file with multiple extensions into the WebLink directory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Estsoft | Internetdisk | All versions |
References
- NVD record
- CVE.org record
- http://securityreason.com/securityalert/1063
- http://securitytracker.com/id?1016233
- http://www.securityfocus.com/archive/1/436001/100/0/threaded
- http://www.securityfocus.com/bid/18279
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26948
- http://securityreason.com/securityalert/1063
- http://securitytracker.com/id?1016233
- http://www.securityfocus.com/archive/1/436001/100/0/threaded
- http://www.securityfocus.com/bid/18279
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26948