CVEvulnerability
CVE-2006-1485
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-03-29
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
Description
gm-upload.cgi in Greymatter 1.3.1 allows remote authenticated users with upload privileges to execute arbitrary programs by uploading files to locations within the web root. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected configurations
• greymatter greymatter (<= 1.3.1)
• greymatter greymatter 1.1b
• greymatter greymatter 1.2
• greymatter greymatter 1.3
• greymatter greymatter 1.21
• greymatter greymatter 1.21a
• greymatter greymatter 1.21b
• greymatter greymatter 1.21c
• greymatter greymatter 1.21d
References
- http://secunia.com/advisories/19423 Vendor Advisory
- http://www.osvdb.org/24210 www.osvdb.org
- http://www.securityfocus.com/bid/17271 Exploit
- http://www.vupen.com/english/advisories/2006/1138 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25496 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/19423 Vendor Advisory
- http://www.osvdb.org/24210 www.osvdb.org
- http://www.securityfocus.com/bid/17271 Exploit
- http://www.vupen.com/english/advisories/2006/1138 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25496 exchange.xforce.ibmcloud.com