high7.5Public exploit code
CVE-2008-0175
Unrestricted file upload vulnerability in GE Fanuc Proficy Real-Time Information Portal 2.6 and earlier allows remote attackers to execute arbitrary code by up…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- GE Fanuc Real Time Information Portal 2.6 - 'writeFile()' API (Metasploit)2008-11-01 · remote · windows · Verified
Impact
Unrestricted file upload vulnerability in GE Fanuc Proficy Real-Time Information Portal 2.6 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension to the main virtual directory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ge Fanuc | Proficy Real-Time Information Portal | through 2.6 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/28678
- http://securityreason.com/securityalert/3591
- http://support.gefanuc.com/support/index?page=kbchannel&id=KB12460
- http://www.kb.cert.org/vuls/id/339345
- http://www.securityfocus.com/archive/1/487079/100/0/threaded
- http://www.securityfocus.com/archive/1/487242/100/0/threaded
- http://www.securityfocus.com/bid/27446
- http://www.securitytracker.com/id?1019274
- http://www.vupen.com/english/advisories/2008/0307/references
- http://secunia.com/advisories/28678
- http://securityreason.com/securityalert/3591
- http://support.gefanuc.com/support/index?page=kbchannel&id=KB12460
- http://www.kb.cert.org/vuls/id/339345
- http://www.securityfocus.com/archive/1/487079/100/0/threaded
- http://www.securityfocus.com/archive/1/487242/100/0/threaded
- http://www.securityfocus.com/bid/27446
- http://www.securitytracker.com/id?1019274
- http://www.vupen.com/english/advisories/2008/0307/references