CVEvulnerability

CVE-2012-3811

10.0 HIGH Published 2012-07-03 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-07-03
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Unrestricted file upload vulnerability in ImageUpload.ashx in the Wallboard application in Avaya IP Office Customer Call Reporter 7.0 before 7.0.5.8 Q1 2012 Maintenance Release and 8.0 before 8.0.9.13 Q1 2012 Maintenance Release allows remote attackers to execute arbitrary code by uploading an executable file and then accessing it via a direct request.

Affected configurations

• avaya ip office customer call reporter 7.0 • avaya ip office customer call reporter 8.0

References