CVE-2005-4171

The "Upload new image" command in the "Manage Images" eFiction 1.1, when members are allowed to upload images, allows remote attackers to execute arbitrary PHP…

published December 11, 2005

CVSS
—
EPSS
8%
Percentile
94.7
In the wild
Unconfirmed
What it is

The "Upload new image" command in the "Manage Images" eFiction 1.1, when members are allowed to upload images, allows remote attackers to execute arbitrary PHP code by uploading a filename with a .php extension that contains a GIF header, which passes the image validity check but executes any PHP code within the file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07896 · 94.7th percentile
Published
2005-12-11T21:00Z
EPSS history
Timeline
  • 11 DEC 21:00Z
    The "Upload new image" command in the "Manage Images" eFiction 1.1, when members are allowed to upload images, allows remote attackers to execute arbitrary PHP…
    cvelistv5