Bodington 2.1.0 RC1 and earlier does not secure the file upload area, which allows remote attackers to read uploaded files.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Bodington | Bodington | 2.1.0_rc1 (including) | 2.1.0_rc1 (including) |
| Bodington | Bodington | 2.1.0_rc2 (including) | 2.1.0_rc2 (including) |
| Bodington | Bodington | 2.1.0_rc3 (including) | 2.1.0_rc3 (including) |
References
- http://sourceforge.net/tracker/index.php?func=detail\u0026aid=789761\u0026group_id=87659\u0026atid=583930
- http://www.osvdb.org/3770
- http://www.secunia.com/advisories/10749/
- http://www.securityfocus.com/bid/9528
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14986
- http://sourceforge.net/tracker/index.php?func=detail\u0026aid=789761\u0026group_id=87659\u0026atid=583930
- http://www.osvdb.org/3770
- http://www.secunia.com/advisories/10749/
- http://www.securityfocus.com/bid/9528
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14986