Security Advisory

CVE-2006-4859

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2006-09-19 18:00:00

Last updated 2024-08-07 19:23:41

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Unrestricted file upload vulnerability in contact.html.php in the Contact (com_contact) component in Limbo (aka Lite Mambo) CMS 1.0.4.2L and earlier allows remote attackers to upload PHP code to the images/contact folder via a filename with a double extension in the contact_attach parameter in a contact option in index.php, which bypasses an insufficiently restrictive regular expression.

← Browse all CVEs View on cve.org ↗