CVE-2005-2781

Published: 02 September 2005

The Avatar upload feature in FUD Forum before 2.7.0 does not properly verify uploaded files, which allows remote attackers to execute arbitrary PHP code via a file with a .php extension that contains image data followed by PHP code.

Priority

Unknown

Status

Package Release Status
egroupware
Launchpad, Ubuntu, Debian
Upstream Needs triage

phpgroupware
Launchpad, Ubuntu, Debian
Upstream Needs triage