CWE-637 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-637/ Sun, 26 Feb 2023 09:08:11 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-637 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-637/ 32 32 CVE-2007-6479 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-6479/ Sun, 26 Feb 2023 09:08:11 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-6479/ Unrestricted file upload vulnerability in the “My productions” component for main/auth/profile.php (aka the “My profile” page) in Dokeos 1.8.4 allows remote authenticated users to upload and execute arbitrary PHP files via a filename with a double extension, which can then be accessed through a URI under main/upload/users/.

The post CVE-2007-6479 appeared first on CVE Vulnerability.

]]> Unrestricted file upload vulnerability in the “My productions” component for main/auth/profile.php (aka the “My profile” page) in Dokeos 1.8.4 allows remote authenticated users to upload and execute arbitrary PHP files via a filename with a double extension, which can then be accessed through a URI under main/upload/users/.

The post CVE-2007-6479 appeared first on CVE Vulnerability.

]]> CVE-2007-6067 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-6067/ Sun, 26 Feb 2023 09:07:59 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-6067/ Algorithmic complexity vulnerability in the regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated users to cause a denial of service (memory consumption) via a crafted “complex” regular expression with doubly-nested states.

The post CVE-2007-6067 appeared first on CVE Vulnerability.

]]> Algorithmic complexity vulnerability in the regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated users to cause a denial of service (memory consumption) via a crafted “complex” regular expression with doubly-nested states.

The post CVE-2007-6067 appeared first on CVE Vulnerability.

]]> CVE-2007-1552 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-1552/ Sun, 26 Feb 2023 09:05:55 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-1552/ Unrestricted file upload vulnerability in usercp.php in MetaForum 0.513 Beta restricts file types based on the MIME type in the Content-type HTTP header, which allows remote attackers to upload and execute arbitrary scripts via an image MIME type with a filename containing an executable extension such as .php.

The post CVE-2007-1552 appeared first on CVE Vulnerability.

]]> Unrestricted file upload vulnerability in usercp.php in MetaForum 0.513 Beta restricts file types based on the MIME type in the Content-type HTTP header, which allows remote attackers to upload and execute arbitrary scripts via an image MIME type with a filename containing an executable extension such as .php.

The post CVE-2007-1552 appeared first on CVE Vulnerability.

]]>