The Tutorials 2.0 module in XOOPS and E-XOOPS allows remote attackers to execute arbitrary code by uploading a PHP file without a MIME image type, then directly accessing the uploaded file.
References
Link | Resource |
---|---|
http://marc.info/?l=vuln-dev&m=105577873506147&w=2 |
Configurations
Information
Published : 2003-08-06 21:00
Updated : 2016-10-17 19:34
NVD link : CVE-2003-0491
Mitre link : CVE-2003-0491
JSON object : View
CWE
Products Affected
mytutorials
- tutorials