CVE-2012-2939 Multiple unrestricted file upload vulnerabilities in Travelon Express 6.2.2 allow remote authenticated users to execute arbitrary code by uploading a file with an executable extension using (1) airlin...
MediumCVSS 6.5
EPSS 3.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple unrestricted file upload vulnerabilities in Travelon Express 6.2.2 allow remote authenticated users to execute arbitrary code by uploading a file with an executable extension using (1) airline-edit.php, (2) hotel-image-add.php, or (3) hotel-add.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| itechscripts travelon express | = 6.2.2 | No fix listed |
References
- iel-sayed.blogspot.com
- 18871 exploit
- 81889 vdb-entry
- 53500 vdb-entry
- www.vulnerability-lab.com
- travelonexpress-multiple-file-upload(75542) vdb-entry