CVE-2006-3158
Severity:
Pending analysis
Type:
Unavailable / Other
Publication date:
22/06/2006
Last modified:
18/10/2018
Description
index.php in Eduha Meeting does not properly restrict file extensions before permitting a file upload, which allows remote attackers to bypass security checks and upload or execute arbitrary php code via the add action.
Impact
Base Score 2.0
7.50
Severity 2.0
HIGH
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:eduha_meeting:eduha_meeting:*:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://secunia.com/advisories/20731
- http://www.biyosecurity.be/bugs/meeting.txt
- http://www.osvdb.org/26627
- http://www.securityfocus.com/archive/1/437992/100/0/threaded
- http://www.securityfocus.com/bid/18499
- http://www.vupen.com/english/advisories/2006/2428
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27296