OSVDB ID: 49844

Title: AlstraSoft SendIt Pro submit_file.php Unrestricted File Upload Arbitrary PHP Code Execution

Info

Disclosure

Nov 12, 2008

Discovery

Unknown

Dates

Exploit

Nov 12, 2008

Solution

Unknown

Description

Classification

Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Public
Disclosure: Uncoordinated Disclosure
OSVDB: Web Related

Solution

Products

Unknown or Incomplete

References

CVE ID: 2008-6932 (see also: NVD)
Bugtraq ID: 32277
Secunia Advisory ID: 32666
ISS X-Force ID: 46593
Milw0rm: 7101
Exploit Database: 7101
Vendor URL: http://www.alstrasoft.com/sendit.htm
Other Advisory URL: http://www.vupen.com/english/advisories/2008/3139

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/49844