CVE-2011-0678

Published: Jan 28, 2011Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Unrestricted file upload vulnerability in the EasyEdit module in Lomtec ActiveWeb Professional 3.0 allows remote attackers to execute arbitrary code by uploading an executable file via the UploadDirectory and Accepted Extensions fields in the getImagefile component of EasyEdit.cfm.

Affected (1)

Products: Lomtec: Activeweb

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Lomtec Activeweb	Version 3.0

References (14)

http://osvdb.org/70669

Source: cve@mitre.org

http://secunia.com/advisories/43031

Source: cve@mitre.org

http://www.exploitdevelopment.com/Vulnerabilities/2010-WEB-002.html

Source: cve@mitre.org

Exploit

http://www.kb.cert.org/vuls/id/528212

Source: cve@mitre.org

US Government Resource

http://www.securityfocus.com/bid/45985

Source: cve@mitre.org

Exploit

http://www.vupen.com/english/advisories/2011/0217

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/65013

Source: cve@mitre.org

http://osvdb.org/70669

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/43031

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.exploitdevelopment.com/Vulnerabilities/2010-WEB-002.html

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.kb.cert.org/vuls/id/528212

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.securityfocus.com/bid/45985

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.vupen.com/english/advisories/2011/0217

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/65013

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.