CVE-2012-1153 in appRaininfo

Summary

Unrestricted file upload vulnerability in addons/uploadify/uploadify.php in appRain CMF 0.1.5 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the uploads directory.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservation

02/14/2012

Disclosure

10/06/2012

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

Sources

Want to stay up to date on a daily basis?

Enable the mail alert feature now!