Description

manageuser.php in Collabtive before 0.7.6 allows remote authenticated users, and possibly unauthenticated attackers, to bypass intended access restrictions and upload and execute arbitrary files by uploading an avatar file with an accepted Content-Type such as image/jpeg, then accessing it via a direct request to the file in files/standard/avatar.

Remediation

References

CVE-2012-2670

Related Vulnerabilities

Zikula Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-0911)

Liferay DXP Origin Validation Error Vulnerability (CVE-2022-25146)

WordPress Plugin rtMedia for WordPress, BuddyPress and bbPress Cross-Site Scripting (3.7.38)

WordPress Plugin Auto Attachments TimThumb Arbitrary File Upload (0.3)

WordPress Plugin SocialFit 'msg' Parameter Cross-Site Scripting (1.2.2)

Severity

Medium

Classification

CVE-2012-2670 CWE-20

Tags

Missing Update Known Vulnerabilities