CVEvulnerability
CVE-2007-5401
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-01-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
Unrestricted file upload vulnerability in uploadrequest.asp in Layton HelpBox 3.7.1 allows remote authenticated users to upload and execute arbitrary ASP files, related to not properly checking file extensions.
Affected configurations
• layton technology helpbox 3.7.1
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/27699 Vendor Advisory
- http://secunia.com/secunia_research/2007-94/advisory/ Vendor Advisory
- http://www.securityfocus.com/bid/27187 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39536 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/27699 Vendor Advisory
- http://secunia.com/secunia_research/2007-94/advisory/ Vendor Advisory
- http://www.securityfocus.com/bid/27187 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39536 exchange.xforce.ibmcloud.com