CVE-2010-1514

Related Files

TomatoCMS Arbitrary File Upload

Posted Jun 4, 2010

Site secunia.com

Secunia Research has discovered a vulnerability in TomatoCMS, which can be exploited by malicious users to compromise a vulnerable system. The vulnerability is caused by an error in the validation of uploaded image files while adding a new article. This can be exploited to upload arbitrary files inside the webroot and e.g. execute arbitrary PHP code. Successful exploitation requires "Add new article", "Upload file to server", and "Browse uploaded files" permissions. Version 2.0.6 is affected.

tags | advisory, arbitrary, php

advisories | CVE-2010-1514

SHA-256 | 5e6a7845dcce13483a097aa6b25b598b7ced6a5132b245b40d780046872c4bdd

Download | Favorite | View