medium6.8
CVE-2013-3590
Unrestricted file upload vulnerability in admin/uploadImage.html in SearchBlox before 7.5 build 1 allows remote attackers to execute arbitrary code by uploadin…
Impact
Unrestricted file upload vulnerability in admin/uploadImage.html in SearchBlox before 7.5 build 1 allows remote attackers to execute arbitrary code by uploading an executable file with the image/jpeg content type, and then accessing this file via unspecified vectors, as demonstrated by access to a JSP file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Searchblox | Searchblox | through 7.5 Versions 6.2, 6.3, 6.4, 7.0, 7.1 |