The administrative interface in Movable Type allows attackers to upload files with arbitrary extensions under the web root.
References
Link | Resource |
---|---|
http://secunia.com/advisories/16899 | Vendor Advisory |
http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0091.html |
Configurations
Information
Published : 2005-09-28 16:03
Updated : 2008-09-05 13:53
NVD link : CVE-2005-3102
Mitre link : CVE-2005-3102
JSON object : View
CWE
Products Affected
six_apart
- movable_type