newswire/uploadmedia.cgi in 2coolcode Our Space (Ourspace) 2.0.9 allows remote attackers to upload certain files via unspecified vectors, probably involving unrestricted functionality in uploadmedia.cgi.
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
Link | Tags |
---|---|
http://osvdb.org/36841 | vdb entry |
http://secunia.com/advisories/26650 | third party advisory |
http://www.securityfocus.com/bid/25487 | vdb entry |
https://exchange.xforce.ibmcloud.com/vulnerabilities/36350 | vdb entry |
https://www.exploit-db.com/exploits/4343 | exploit |