CVE-2005-1957
- State
- Published
- Severity
- Not scored
- Published
- Jun 14, 2005
- Updated
- Aug 7, 2024
- Reserved
- Jun 14, 2005
Description
mtnpeak.net File Upload Manager does not properly check user authentication for certain actions, which allows remote attackers to provide a modified base64-encoded file parameter and (1) read arbitrary files via the "view" action or (2) delete arbitrary files via the del action.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 17435vdb-entry
- 20050615 Re: File Upload Manager Sploitsmailing-list
- 20050612 File Upload Manager Sploitsmailing-list
- 20258vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.