CVE-2011-2933 (websitebaker)

Leave a reply

An Arbitrary File Upload vulnerability exists in admin/media/upload.php in WebsiteBaker 2.8.1 and earlier due to a failure to restrict uploaded files with .htaccess, .php4, .php5, and .phtl extensions.

View Full Alert

Related Posts

  • CVE-2011-2933

    An Arbitrary File Upload vulnerability exists in admin/media/upload.php in WebsiteBaker 2.8.1 and earlier due to a failure to restrict uploaded files with .htaccess, .php4, .php5, and .phtl extensions. View Full…

  • CVE-2011-4322

    websitebaker prior to and including 2.8.1 has an authentication error in backup module. View Full Alert

  • CVE-2011-2934 (websitebaker)

    A Cross Site Request Forgery (CSRF) vulnerability exists in the administrator functions in WebsiteBaker 2.8.1 and earlier due to inadequate confirmation for sensitive transactions. View Full Alert

Leave a Reply