6.5
CVSSv2

CVE-2006-2899

Published: 07/06/2006 Updated: 18/10/2018
CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8
VMScore: 655
Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

Vulnerability Summary

Unspecified vulnerability in ESTsoft InternetDISK versions prior to 2006/04/20 allows remote authenticated users to execute arbitrary code, possibly by uploading a file with multiple extensions into the WebLink directory.

Vulnerable Product Search on Vulmon Subscribe to Product

estsoft internetdisk

Exploits

source: wwwsecurityfocuscom/bid/18279/info ESTsoft InternetDisk is prone to an arbitrary file-upload and script-execution vulnerability An attacker can exploit this vulnerability to upload arbitrary code and execute it in the context of the webserver process This may facilitate unauthorized access or privilege escalation; other attack ...