ID | CVE-2007-2266 | ||||||
Sažetak | Progress Webspeed Messenger allows remote attackers to read, create, modify, and execute arbitrary files by invoking webutil/_cpyfile.p in the WService parameter to (1) cgiip.exe or (2) wsisa.dll in scripts/, as demonstrated by using the save,editor options to create a new file using the fileName parameter. | ||||||
Reference | |||||||
CVSS |
|
||||||
Pristup |
|
||||||
Impact |
|
||||||
CVSS vektor | AV:N/AC:L/Au:N/C:C/I:C/A:C | ||||||
Zadnje važnije ažuriranje | 16-10-2018 - 16:42 | ||||||
Objavljeno | 25-04-2007 - 20:19 |