Description
gbcms_php_files/up_loader.php GreenBeast CMS 1.3 does not require authentication to upload files, which allows remote attackers to cause a denial of service (disk consumption) and execute arbitrary code by uploading arbitrary files, such as executing PHP code via an uploaded PHP file.
References
- 1841 third-party-advisory
- greenbeastcms-uploader-file-upload(30069) vdb-entry
- ADV-2006-4416 vdb-entry
- http://newhack.org/advisories/GreenBeastCMS.txt
- 22769 third-party-advisory
- 20061107 GreenBeast CMS <= 1.3 PHP Arbitrary File Upload Vulnerability mailing-list
- 1017176 vdb-entry
- 20950 vdb-entry