5
CVSSv2

CVE-2006-1704

Published: 11/04/2006 Updated: 18/10/2018
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 505
Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

Vulnerability Summary

Sire 2.0 nws allows remote malicious users to upload arbitrary image files without authentication via a direct request to upload.php.

Vulnerable Product Search on Vulmon Subscribe to Product

hubert plisson sire 2.0

Exploits

source: wwwsecurityfocuscom/bid/17431/info SIRE is prone to an arbitrary file-upload vulnerability An attacker can exploit this vulnerability to upload arbitrary code and execute it in the context of the webserver process This may facilitate unauthorized access or privilege escalation; other attacks are also possible <form enctyp ...