Lucene search
FlexeraCVE-2010-1514HistoryJun 15, 2010 - 2:30 p.m.
CVE-2010-1514
2010-06-1514:30:01
flexera
web.nvd.nist.gov
25
cve-2010-1514
security
vulnerability
tomatocms
unrestricted file upload
remote execution
CVSS2
6
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
AI Score
7.5
Confidence
Low
EPSS
0.003
Percentile
70.5%
Unrestricted file upload vulnerability in TomatoCMS 2.0.6 and earlier allows remote authenticated users, with certain privileges, to execute arbitrary PHP code by uploading an image file, and then accessing it via a direct request to the file in an unspecified directory.
Affected configurations
Node
tomatocmstomatocmsRangeβ€2.0.6
ORtomatocmstomatocmsMatch2.0.0
ORtomatocmstomatocmsMatch2.0.1
ORtomatocmstomatocmsMatch2.0.2
ORtomatocmstomatocmsMatch2.0.3
ORtomatocmstomatocmsMatch2.0.3.1430
ORtomatocmstomatocmsMatch2.0.3.1622
ORtomatocmstomatocmsMatch2.0.4
ORtomatocmstomatocmsMatch2.0.5
| Vendor | Product | Version | CPE |
|---|---|---|---|
| tomatocms | tomatocms | * | cpe:2.3:a:tomatocms:tomatocms:*:*:*:*:*:*:*:* |
| tomatocms | tomatocms | 2.0.0 | cpe:2.3:a:tomatocms:tomatocms:2.0.0:*:*:*:*:*:*:* |
| tomatocms | tomatocms | 2.0.1 | cpe:2.3:a:tomatocms:tomatocms:2.0.1:*:*:*:*:*:*:* |
| tomatocms | tomatocms | 2.0.2 | cpe:2.3:a:tomatocms:tomatocms:2.0.2:*:*:*:*:*:*:* |
| tomatocms | tomatocms | 2.0.3 | cpe:2.3:a:tomatocms:tomatocms:2.0.3:*:*:*:*:*:*:* |
| tomatocms | tomatocms | 2.0.3.1430 | cpe:2.3:a:tomatocms:tomatocms:2.0.3.1430:*:*:*:*:*:*:* |
| tomatocms | tomatocms | 2.0.3.1622 | cpe:2.3:a:tomatocms:tomatocms:2.0.3.1622:*:*:*:*:*:*:* |
| tomatocms | tomatocms | 2.0.4 | cpe:2.3:a:tomatocms:tomatocms:2.0.4:*:*:*:*:*:*:* |
| tomatocms | tomatocms | 2.0.5 | cpe:2.3:a:tomatocms:tomatocms:2.0.5:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2010-1514
2010-06-15 14:30:01
prion
prion
Unrestricted file upload
2010-06-15 14:30:00
cvelist
cvelist
CVE-2010-1514
2010-06-14 19:00:00
seebug
seebug
TomatoCMS 2.0.6 δ»»ζζδ»ΆδΈδΌ εθ·¨η«θζ¬ζΌζ΄
2010-06-07 00:00:00
CVSS2
6
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
AI Score
7.5
Confidence
Low
EPSS
0.003
Percentile
70.5%
Related for CVE-2010-1514