CVE-2007-4905: Input Validation

Published Sep 17, 2007

Updated

Unrestricted file upload vulnerability in mod/contak.php in AuraCMS 2.1 allows remote attackers to upload and execute arbitrary PHP files via the image parameter, which places a file under files/.

Affected Software

1 affected component

AuraCMS AuraCMS=2.1

Event History

Sep 17, 2007

CVE Published

04:17 PM

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-4905?

CVE-2007-4905 is considered a high severity vulnerability due to its potential to allow remote code execution.

How do I fix CVE-2007-4905?

To fix CVE-2007-4905, upgrade to a patched version of AuraCMS that addresses this file upload vulnerability.

What impact does CVE-2007-4905 have on my system?

CVE-2007-4905 can allow attackers to upload and execute malicious PHP files, compromising the integrity and security of your server.

Is CVE-2007-4905 specific to any versions of AuraCMS?

Yes, CVE-2007-4905 specifically affects AuraCMS version 2.1.

How can I mitigate the risk of CVE-2007-4905?

To mitigate the risk of CVE-2007-4905, implement strict validation and restrictions on file uploads and consider disabling file upload functionalities if not needed.