CVE-2006-2899 Unspecified vulnerability in ESTsoft InternetDISK versions before 2006/04/20 allows remote authenticated users to execute arbitrary code, possibly by uploading a file with multiple extensions into the...
MediumCVSS 6.5
EPSS 3.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Unspecified vulnerability in ESTsoft InternetDISK versions before 2006/04/20 allows remote authenticated users to execute arbitrary code, possibly by uploading a file with multiple extensions into the WebLink directory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| estsoft internetdisk | All versions | No fix listed |
References
- 1063 third-party-advisory
- 1016233 vdb-entry
- 20060605 [Kil13r-SA-20060606] ESTsoft InternetDISK Arbitary Code Execution Vulnerability mailing-list
- 18279 exploit patch vdb-entry
- internetdisk-url-code-execution(26948) vdb-entry