CVE-2011-0678

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 9.2%

from disclosure to weapon0 days

Published on NVDJan 28

1st PoCJan 25

exploitation probability

9.2%top 5% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

Unrestricted file upload vulnerability in the EasyEdit module in Lomtec ActiveWeb Professional 3.0 allows remote attackers to execute arbitrary code by uploading an executable file via the UploadDirectory and Accepted Extensions fields in the getImagefile component of EasyEdit.cfm.

Affected products

n/a · n/a

public PoCs found — 1✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/35256

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://osvdb.org/70669 http://secunia.com/advisories/43031 https://exchange.xforce.ibmcloud.com/vulnerabilities/65013 http://www.exploitdevelopment.com/Vulnerabilities/2010-WEB-002.html http://www.kb.cert.org/vuls/id/528212 http://www.securityfocus.com/bid/45985 http://www.vupen.com/english/advisories/2011/0217