Vulnerabilities > CVE-2003-0482 - Remote Security vulnerability in Gero Kohnert Tutos 1.1

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
gero-kohnert
exploit available

Summary

TUTOS 1.1 allows remote attackers to execute arbitrary code by uploading the code using file_new.php, then directly accessing the uploaded code via a request to the repository containing the code.

Vulnerable Configurations

Part Description Count
Application
Gero_Kohnert
1

Exploit-Db

descriptionTutos 1.1 File_New Arbitrary File Upload Vulnerability. CVE-2003-0482. Webapps exploit for php platform
idEDB-ID:22819
last seen2016-02-02
modified2003-06-20
published2003-06-20
reporterFrançois SORIN
sourcehttps://www.exploit-db.com/download/22819/
titleTutos 1.1 File_New Arbitrary File Upload Vulnerability