CVEvulnerability

CVE-2011-0678

6.8 MEDIUM Published 2011-01-28 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2011-01-28
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P

Description

Unrestricted file upload vulnerability in the EasyEdit module in Lomtec ActiveWeb Professional 3.0 allows remote attackers to execute arbitrary code by uploading an executable file via the UploadDirectory and Accepted Extensions fields in the getImagefile component of EasyEdit.cfm.

Affected configurations

• lomtec activeweb 3.0

References

http://osvdb.org/70669 osvdb.org
http://secunia.com/advisories/43031 secunia.com
http://www.exploitdevelopment.com/Vulnerabilities/2010-WEB-002.html Exploit
http://www.kb.cert.org/vuls/id/528212 US Government Resource
http://www.securityfocus.com/bid/45985 Exploit
http://www.vupen.com/english/advisories/2011/0217 www.vupen.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/65013 exchange.xforce.ibmcloud.com
http://osvdb.org/70669 osvdb.org
http://secunia.com/advisories/43031 secunia.com
http://www.exploitdevelopment.com/Vulnerabilities/2010-WEB-002.html Exploit
http://www.kb.cert.org/vuls/id/528212 US Government Resource
http://www.securityfocus.com/bid/45985 Exploit
http://www.vupen.com/english/advisories/2011/0217 www.vupen.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/65013 exchange.xforce.ibmcloud.com