high7.5
CVE-2014-0342
Multiple unrestricted file upload vulnerabilities in fileupload.php in PivotX before 2.3.9 allow remote authenticated users to execute arbitrary PHP code by up…
Impact
Multiple unrestricted file upload vulnerabilities in fileupload.php in PivotX before 2.3.9 allow remote authenticated users to execute arbitrary PHP code by uploading a file with a (1) .php or (2) .php# extension, and then accessing it via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pivotx | Pivotx | through 2.3.8 Versions 2.1.0, 2.1.1, 2.1.2, 2.2.0, 2.2.1 |
References
- NVD record
- CVE.org record
- http://blog.pivotx.net/archive/2014/03/03/pivotx-239-released
- http://pivotx.net/page/security
- http://sourceforge.net/p/pivot-weblog/code/4347/
- http://www.kb.cert.org/vuls/id/901156
- http://blog.pivotx.net/archive/2014/03/03/pivotx-239-released
- http://pivotx.net/page/security
- http://sourceforge.net/p/pivot-weblog/code/4347/
- http://www.kb.cert.org/vuls/id/901156