medium5.0Public exploit code
CVE-2006-5016
Unrestricted file upload vulnerability in admin/x_image.php in Szava Gyula and Csaba Tamas e-Vision CMS, probably 1.0, allows remote attackers to upload arbitr…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- e-vision CMS 2.02 - SQL Injection / Arbitrary File Upload / Information Gathering2008-08-02 · webapps · php · Verified
Impact
Unrestricted file upload vulnerability in admin/x_image.php in Szava Gyula and Csaba Tamas e-Vision CMS, probably 1.0, allows remote attackers to upload arbitrary files to the /imagebank directory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| E-Vision | E-Vision Cms | Version 1.0 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/21969
- http://securityreason.com/securityalert/1642
- http://www.securityfocus.com/archive/1/446706/100/0/threaded
- http://www.securityfocus.com/bid/21047
- http://www.vupen.com/english/advisories/2006/3764
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29124
- http://secunia.com/advisories/21969
- http://securityreason.com/securityalert/1642
- http://www.securityfocus.com/archive/1/446706/100/0/threaded
- http://www.securityfocus.com/bid/21047
- http://www.vupen.com/english/advisories/2006/3764
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29124