Mega Upload Progress Bar Unspecified File Upload Vulnerability
BID:11547
Info
Mega Upload Progress Bar Unspecified File Upload Vulnerability
| Bugtraq ID: | 11547 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 27 2004 12:00AM |
| Updated: | Oct 27 2004 12:00AM |
| Credit: | This issue was reported by the vendor. |
| Vulnerable: |
Mega Upload Progress Bar Mega Upload Progress Bar 1.44 Mega Upload Progress Bar Mega Upload Progress Bar 1.43 Mega Upload Progress Bar Mega Upload Progress Bar 1.35 Mega Upload Progress Bar Mega Upload Progress Bar 1.30 |
| Not Vulnerable: |
Mega Upload Progress Bar Mega Upload Progress Bar 1.45 |
Discussion
Mega Upload Progress Bar Unspecified File Upload Vulnerability
Mega Upload Progress Bar is reported prone to an unspecified vulnerability. The impact of this issue is currently unknown. It is reported that this issue presents itself when a list of uploaded file names is passed from a Perl script to a PHP script of the application. Apparently, this is carried out in an insecure manner, adversely affecting the security properties of the application.
Mega Upload Progress Bar versions 1.44 and prior are reported prone to this issue.
This BID will be updated as more information becomes available.
Mega Upload Progress Bar is reported prone to an unspecified vulnerability. The impact of this issue is currently unknown. It is reported that this issue presents itself when a list of uploaded file names is passed from a Perl script to a PHP script of the application. Apparently, this is carried out in an insecure manner, adversely affecting the security properties of the application.
Mega Upload Progress Bar versions 1.44 and prior are reported prone to this issue.
This BID will be updated as more information becomes available.
Exploit / POC
Mega Upload Progress Bar Unspecified File Upload Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Mega Upload Progress Bar Unspecified File Upload Vulnerability
Solution:
The vendor has released Mega Upload Progress Bar 1.45 to address this issue.
Mega Upload Progress Bar Mega Upload Progress Bar 1.30
Mega Upload Progress Bar Mega Upload Progress Bar 1.35
Mega Upload Progress Bar Mega Upload Progress Bar 1.43
Mega Upload Progress Bar Mega Upload Progress Bar 1.44
Solution:
The vendor has released Mega Upload Progress Bar 1.45 to address this issue.
Mega Upload Progress Bar Mega Upload Progress Bar 1.30
-
Mega Upload Progress Bar megaupload-1.45.tar.gz
http://prdownloads.sourceforge.net/megaupload/megaupload-1.45.tar.gz?d ownload
Mega Upload Progress Bar Mega Upload Progress Bar 1.35
-
Mega Upload Progress Bar megaupload-1.45.tar.gz
http://prdownloads.sourceforge.net/megaupload/megaupload-1.45.tar.gz?d ownload
Mega Upload Progress Bar Mega Upload Progress Bar 1.43
-
Mega Upload Progress Bar megaupload-1.45.tar.gz
http://prdownloads.sourceforge.net/megaupload/megaupload-1.45.tar.gz?d ownload
Mega Upload Progress Bar Mega Upload Progress Bar 1.44
-
Mega Upload Progress Bar megaupload-1.45.tar.gz
http://prdownloads.sourceforge.net/megaupload/megaupload-1.45.tar.gz?d ownload
References
Mega Upload Progress Bar Unspecified File Upload Vulnerability
References:
References:
- Home Page (Mega Upload Progress Bar)
- Mega Upload Progress Bar: Release Notes (Mega Upload Progress Bar)