CVE-2007-1255
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Connectix Boards 0.7及之前版本的admin.bbcode.php中存在未限制文件上传漏洞。远程认证管理员可以通过提交上传图像参数到admin.php，来上传一个带有.php扩展名的特制的GIF微笑图像，从而实现任意的PHP代码执行。以后借助对smileys/中的文件的一个直接请求，可以访问该图像。注意：远程未认证攻击者可以利用它进行SQL注入攻击。
Public Exploits 1
ExploitDB · 1
EDB-3352#CVE-2007-1255 [webapps]
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2007-1255
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Unrestricted file upload vulnerability in admin.bbcode.php in Connectix Boards 0.7 and earlier allows remote authenticated administrators to execute arbitrary PHP code by uploading a crafted GIF smiley image with a .php extension via the uploadimage parameter to admin.php, which can be later accessed via a direct request for the file in smileys/. NOTE: this can be leveraged with a separate SQL injection issue for remote unauthenticated attacks.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Connectix Boards dmin.bbcode.php 未限制文件上传漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Connectix Boards 0.7及之前版本的admin.bbcode.php中存在未限制文件上传漏洞。远程认证管理员可以通过提交上传图像参数到admin.php，来上传一个带有.php扩展名的特制的GIF微笑图像，从而实现任意的PHP代码执行。以后借助对smileys/中的文件的一个直接请求，可以访问该图像。注意：远程未认证攻击者可以利用它进行SQL注入攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2007-1255
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2007-1255
请登录查看更多情报信息。
Vendor Advisories for CVE-2007-1255 (3)
Exploits & Public PoCs for CVE-2007-1255 (1)
Other References for CVE-2007-1255 (1)
Same Patch Batch · n/a · 2007-03-03 · 45 CVEs total
| CVE-2007-1235 | bj_sintay sitex 未限制文件上传漏洞 | |
| CVE-2007-1238 | Microsoft Office 资源管理错误漏洞 | |
| CVE-2007-1237 | bj_sintay sitex 特定参数单引号值 信息泄露漏洞 | |
| CVE-2007-1239 | Microsoft Excel 受损XML/受损XLS 文件 拒绝服务攻击漏洞 | |
| CVE-2007-1242 | Audins Audiens system/index.php SQL注入漏洞 | |
| CVE-2007-1243 | Audins Audiens unistall.php 输入验证错误漏洞 | |
| CVE-2007-1244 | WordPress 管理面板 跨站请求伪造漏洞 | |
| CVE-2007-1245 | IrfanView 畸形WMF文件 拒绝服务攻击漏洞 | |
| CVE-2007-1246 | MPlayer DMO文件解析堆溢出漏洞 | |
| CVE-2007-1241 | Audins Audiens setup.php 跨站脚本攻击漏洞 | |
| CVE-2007-1236 | sitex 多个信息泄露漏洞 | |
| CVE-2007-1234 | bj_sintay sitex 多个跨站脚本攻击漏洞 | |
| CVE-2007-1233 | STWC-Counter downloadcounter.php PHP远程文件包含漏洞 | |
| CVE-2007-1232 | SQLiteManager SQLiteManager_currentTheme cookie 目录遍历漏洞 | |
| CVE-2007-1231 | SQLiteManager 多个跨站脚本攻击漏洞 | |
| CVE-2006-7099 | SolarPay index.php 目录遍历漏洞 | |
| CVE-2006-7098 | Debian Apache Root Shell本地权限提升漏洞 | |
| CVE-2005-4831 | ViewCVS Source View输入验证漏洞 | |
| CVE-2005-4830 | ViewCVS Source View CRLF注入漏洞 | |
| CVE-2007-1259 | WebAPP 多个未明漏洞 |
Showing top 20 of 45 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2007-1255
No comments yet