CVE-2007-5401 Unrestricted file upload vulnerability in uploadrequest.asp in Layton HelpBox 3.7.1 allows remote authenticated users to upload and execute arbitrary ASP files, related to not properly checking file e...
MediumCVSS 6.5
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unrestricted file upload vulnerability in uploadrequest.asp in Layton HelpBox 3.7.1 allows remote authenticated users to upload and execute arbitrary ASP files, related to not properly checking file extensions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| layton technology helpbox | = 3.7.1 | No fix listed |
References
- 27699 third-party-advisory vendor-advisory
- secunia.com vendor-advisory
- 27187 vdb-entry
- helpbox-uploadrequest-file-upload(39536) vdb-entry