Vulnerabilities > CVE-2009-4817 - Unspecified vulnerability in Element-It Ultimate Uploader 1.3.0

047910
CVSS 6.8 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
element-it
exploit available
NVD
Published: 2010-04-27
Updated: 2017-08-17

Summary

Unrestricted file upload vulnerability in Element-IT Ultimate Uploader 1.3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in upload/. Per: http://cwe.mitre.org/data/definitions/434.html 'CWE-434: Unrestricted Upload of File with Dangerous Type'

Vulnerable Configurations

Part Description Count
Application
Element-It
1

Exploit-Db

descriptionUltimate Uploader 1.3 Remote File Upload Vulnerability. CVE-2009-4817. Webapps exploit for php platform
fileexploits/php/webapps/10578.txt
idEDB-ID:10578
last seen2016-02-01
modified2009-12-21
platformphp
port
published2009-12-21
reporterMaster Mind
sourcehttps://www.exploit-db.com/download/10578/
titleUltimate Uploader 1.3 - Remote File Upload Vulnerability
typewebapps

References