CVE-2006-2330

Published May 12, 2006

Last updated 6 years ago

Overview

Description: PHP-Fusion 6.00.306 and earlier, running under Apache HTTP Server 1.3.27 and PHP 4.3.3, allows remote authenticated users to upload files of arbitrary types using a filename that contains two or more extensions that ends in an assumed-valid extension such as .gif, which bypasses the validation, as demonstrated by uploading then executing an avatar file that ends in ".php.gif" and contains PHP code in EXIF metadata.
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 6.4
Impact score: 4.9
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:P/I:P/A:N

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:php_fusion:php_fusion:6.00.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "81D8A288-20D3-42A2-BF19-14417D9063F9"
          },
          {
            "criteria": "cpe:2.3:a:php_fusion:php_fusion:6.00.105:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D4D79B94-BBA2-47D2-9D2C-5EF59FE6D7B7"
          },
          {
            "criteria": "cpe:2.3:a:php_fusion:php_fusion:6.00.106:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E92E863F-C72B-428E-A134-2CA5CA7058B5"
          },
          {
            "criteria": "cpe:2.3:a:php_fusion:php_fusion:6.00.107:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BFC61337-9477-46AC-AA5E-7722F594BCAE"
          },
          {
            "criteria": "cpe:2.3:a:php_fusion:php_fusion:6.00.109:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C1318098-F9B4-4BE8-AB18-3EB82DE4E740"
          },
          {
            "criteria": "cpe:2.3:a:php_fusion:php_fusion:6.00.110:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "ECBE45DB-64DA-4EC5-9DF0-749D533E7510"
          },
          {
            "criteria": "cpe:2.3:a:php_fusion:php_fusion:6.00.204:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5B24DACA-1F61-4AD6-9074-F330EFB28B92"
          },
          {
            "criteria": "cpe:2.3:a:php_fusion:php_fusion:6.00.206:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5335762A-EA49-48D3-8A0C-0C031FECBC91"
          },
          {
            "criteria": "cpe:2.3:a:php_fusion:php_fusion:6.00.303:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D15B4762-66F2-4277-A975-00401C78F381"
          },
          {
            "criteria": "cpe:2.3:a:php_fusion:php_fusion:6.00.304:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DA03A905-10E9-4EF5-B6C0-739ADEB16705"
          },
          {
            "criteria": "cpe:2.3:a:php_fusion:php_fusion:6.00.306:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8E8CD847-F478-4DC1-92A8-A0DB3CBE3BBE"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References