CVE-2006-4581 - Unrestricted file upload vulnerability in The Address Book 1.04e validates the Content-Type header but not the file extension, which allows remote attackers to upload arbitrary PHP scripts

Back Back to CVE browser

MEDIUM

Unrestricted file upload vulnerability in The Address Book 1.04e validates the Content-Type header but not the file extension, which allows remote attackers to upload arbitrary PHP scripts

Published Jan 3, 2007

5.0

MEDIUM

CVSS 2.0

EPSS 1.29%

Description

Unrestricted file upload vulnerability in The Address Book 1.04e validates the Content-Type header but not the file extension, which allows remote attackers to upload arbitrary PHP scripts.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (5)

http://osvdb.org/32560
vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/21694
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/secunia_research/2006-76/advisory/
x_refsource_MISCVendor Advisory
http://www.securityfocus.com/bid/21870
vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/31250
vdb-entryx_refsource_XF

Link	Providers	Tags
http://osvdb.org/32560		vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/21694		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/secunia_research/2006-76/advisory/		x_refsource_MISCVendor Advisory
http://www.securityfocus.com/bid/21870		vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/31250		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner flexera

Published Jan 3, 2007

Updated Aug 7, 2024

Reserved Sep 6, 2006

Link CVE-2006-4581

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-4581

Red Hat

Severity n/a

Public date n/a

Links CVE-2006-4581