Vulnerabilities > CVE-2007-0764 - File-Upload vulnerability in F3Site 2.1

047910
CVSS 6.5 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
SINGLE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
f3site
exploit available
NVD
Published: 2007-02-06
Updated: 2017-10-19

Summary

Unrestricted file upload vulnerability in F3Site 2.1 and earlier allows remote authenticated administrators to upload and execute arbitrary PHP scripts via GIF86 header in a file in the uplf parameter, which can be later accessed via a relative pathname in the dir parameter in adm.php.

Vulnerable Configurations

Part Description Count
Application
F3Site
1

Exploit-Db

descriptionF3Site <= 2.1 Remote Code Execution Exploit. CVE-2007-0763,CVE-2007-0764. Webapps exploit for php platform
fileexploits/php/webapps/3255.php
idEDB-ID:3255
last seen2016-01-31
modified2007-02-02
platformphp
port
published2007-02-02
reporterKacper
sourcehttps://www.exploit-db.com/download/3255/
titleF3Site <= 2.1 - Remote Code Execution Exploit
typewebapps

References