Unscored CVE-2006-2281 EUVD-2006-2282GHSA-gq6q-mxvx-gv7h

X-Scripts X-Poll (xpoll) 2.30 allows remote attackers to execute arbitrary PHP code by using admin/images/add.php to upload a PHP file, the…

Published May 9, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

X-Scripts X-Poll (xpoll) 2.30 allows remote attackers to execute arbitrary PHP code by using admin/images/add.php to upload a PHP file, then access it.

References

xpoll-add-file-upload(26363) vdb-entry
17901 vdb-entry
"X-POLL admin By-Pass" - standard PHP upload? mailing-list
872 third-party-advisory
20057 third-party-advisory
20060507 X-POLL admin By-Pass mailing-list
ADV-2006-1732 vdb-entry