medium6.8Public exploit code
CVE-2009-1659
Unrestricted file upload vulnerability in admin/uploadimage.php in eLitius 1.0 allows remote attackers to bypass intended access restrictions and upload and ex…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- eLitius 1.0 - Remote Command Execution2009-05-04 · webapps · php · Verified
Impact
Unrestricted file upload vulnerability in admin/uploadimage.php in eLitius 1.0 allows remote attackers to bypass intended access restrictions and upload and execute arbitrary files via an avatar file with an accepted Content-Type such as image/gif, then requesting the file in admin/banners/.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Intelliants | Elitius | Version 1.0 |
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/34813
- http://www.vupen.com/english/advisories/2009/1248
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50305
- https://www.exploit-db.com/exploits/8603
- http://www.securityfocus.com/bid/34813
- http://www.vupen.com/english/advisories/2009/1248
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50305
- https://www.exploit-db.com/exploits/8603