CVE-2004-2262: Malicious File Upload
Published Dec 31, 2004
·Updated
ImageManager in e107 before 0.617 does not properly check the types of uploaded files, which allows remote attackers to execute arbitrary code by uploading a PHP file via the upload parameter to images.php.
Affected Software
13 affected components
e107 e107<0.617
e107 e107=0.616
e107 e107=0.615a
e107 e107=0.555_beta
e107 e107=0.610
e107 e107=0.554
e107 e107=0.545
e107 e107=0.615
e107 e107=0.613
e107 e107=0.603
e107 e107=0.614
e107 e107=0.611
e107 e107=0.612
Remediation
Patch Available
Event History
Dec 31, 2004
CVE Published
via NVD·05:00 AM
Jul 19, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-2262?
CVE-2004-2262 has been classified as a high severity vulnerability due to the potential for remote code execution.
2
How do I fix CVE-2004-2262?
To fix CVE-2004-2262, it is recommended to upgrade e107 CMS to version 0.617 or later.
3
What versions of e107 CMS are affected by CVE-2004-2262?
CVE-2004-2262 affects all versions of e107 CMS prior to 0.617.
4
How can CVE-2004-2262 be exploited?
CVE-2004-2262 can be exploited via uploading a malicious PHP file through the upload parameter in images.php.
5
What type of vulnerability is CVE-2004-2262?
CVE-2004-2262 is categorized as a remote code execution vulnerability.