Beveiligingsadvies

CVE-2011-4334

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2017-10-23 18:00:00
Laatst bijgewerkt 2024-08-07 00:01:51
Toegewezen door redhat
CVSS-score geen score
Status PUBLISHED

Beschrijving

edit.php in LabWiki 1.1 and earlier does not properly verify uploaded user files, which allows remote authenticated users to upload arbitrary PHP files via a PHP file with a .gif extension in the userfile parameter.