CVE-2006-2588 File upload in n/a
Remote attackers can upload arbitrary file types via .gif extension in Russcom PHPImages, potentially leading to code execution.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2006-2588?
CVE-2006-2588 is a medium-severity vulnerability in n/a, published on 25 May 2006. It can be exploited over the network, with no action from the victim.
Official description
Russcom PHPImages allows remote attackers to upload files of arbitrary types by uploading a file with a .gif extension. NOTE: due to lack of specific information about attack vectors do not depend on the existence of another vulnerability, it is not clear whether this is a vulnerability.
Which versions are affected by CVE-2006-2588?
It affects 1 product.
Products include Russcom Network Phpimages.
How do I fix CVE-2006-2588?
No fix has been published for CVE-2006-2588 yet. Limit exposure of the affected software until one is available.
Is CVE-2006-2588 being exploited?
There is no known exploitation of CVE-2006-2588 in the wild and no public exploit code.
Sources
Also known as CVE-2006-2600, GHSA-3hmv-gr4c-qpjc.