CVE-2012-1468

Incomplete blacklist vulnerability in Open Journal Systems before 2.3.7 allows remote authenticated users with the Author Role permission to execute arbitrary…

published September 6, 2012

CVSS
—
EPSS
3%
Percentile
89.0
In the wild
Unconfirmed
What it is

Incomplete blacklist vulnerability in Open Journal Systems before 2.3.7 allows remote authenticated users with the Author Role permission to execute arbitrary code by uploading a file with an executable extension that is not ".php", then accessing it via a direct request to the file in submission/original/ in the associated article directory, as demonstrated using .pHp, .asp, and other extensions.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03482 · 89.0th percentile
Published
2012-09-06T21:00Z
EPSS history
Timeline
  • 06 SEP 21:00Z
    Incomplete blacklist vulnerability in Open Journal Systems before 2.3.7 allows remote authenticated users with the Author Role permission to execute arbitrary…
    cvelistv5