Description
Unrestricted file upload vulnerability in toendaCMS before 0.6.2 Stable allows remote authenticated administrators to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in data/images/albums.
References
- 20051107 SEC Consult SA-20051107-0 :: toendaCMS multiple vulnerabilites mailing-list
- 17471 third-party-advisory
- http://www.toenda.com/de/data/files/Software/toendaCMS_Version_0.6.0_Stable/toendaCMS_0.6.2.1_Stable.zip
- 15351 vdb-entry