Description
E-Business Designer (eBD) 3.1.4 and earlier allows remote attackers to upload or modify arbitrary files, and execute arbitrary code, via a direct request to (1) common/html_editor/image_browser.upload.html, (2) common/html_editor/image_browser.html, or (3) common/html_editor/html_editor.html. NOTE: this can also be used for cross-site scripting (XSS) attacks by uploading cascading style sheet (.CSS) files.
References
- 20060616 Re: Several flaws in e-business designer (eBD) mailing-list
- [ebd-devel] 20060502 actualización de seguridad mailing-list
- 20071 third-party-advisory
- 891 third-party-advisory
- ebd-multiple-auth-bypass(26474) vdb-entry
- 20060511 Several flaws in e-business designer (eBD) mailing-list
- 20060511 Several flaws in e-business designer (eBD) mailing-list
- 17933 vdb-entry
- ADV-2006-1784 vdb-entry
- 1016326 vdb-entry