CVE-2006-2330 - PHP-Fusion 6.00.306 and earlier, running under Apache HTTP Server 1.3.27 and PHP 4.3.3, allows remote authenticated users to upload files of arbitrary types using a filename that contains two or more extensions that ends in an assumed-valid extension such as .gif, which bypasses the validation, as demonstrated by uploading then executing an avatar file that ends in ".php.gif" and contains PHP code in EXIF metadata

Back Back to CVE browser

MEDIUM

PHP-Fusion 6.00.306 and earlier, running under Apache HTTP Server 1.3.27 and PHP 4.3.3, allows remote authenticated users to upload files of arbitrary types using a filename that contains two or more extensions that ends in an assumed-valid extension such as .gif, which bypasses the validation, as demonstrated by uploading then executing an avatar file that ends in ".php.gif" and contains PHP code in EXIF metadata

Published May 12, 2006

6.4

MEDIUM

CVSS 2.0

EPSS 7.83%

Description

PHP-Fusion 6.00.306 and earlier, running under Apache HTTP Server 1.3.27 and PHP 4.3.3, allows remote authenticated users to upload files of arbitrary types using a filename that contains two or more extensions that ends in an assumed-valid extension such as .gif, which bypasses the validation, as demonstrated by uploading then executing an avatar file that ends in ".php.gif" and contains PHP code in EXIF metadata.

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (9)

http://secunia.com/advisories/19992
third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://securityreason.com/securityalert/873
third-party-advisoryx_refsource_SREASON
http://www.osvdb.org/25537
vdb-entryx_refsource_OSVDB
http://www.php-fusion.co.uk/news.php
x_refsource_CONFIRMPatch
http://www.securityfocus.com/archive/1/433277/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/17898
vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2006/1735
vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-2331
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/26388
vdb-entryx_refsource_XF

Link	Providers	Tags
http://secunia.com/advisories/19992		third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://securityreason.com/securityalert/873		third-party-advisoryx_refsource_SREASON
http://www.osvdb.org/25537		vdb-entryx_refsource_OSVDB
http://www.php-fusion.co.uk/news.php		x_refsource_CONFIRMPatch
http://www.securityfocus.com/archive/1/433277/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/17898		vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2006/1735		vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-2331		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/26388		vdb-entryx_refsource_XF