CVE-2006-6783 File upload in n/a

High 7.5 Published 28 Dec 2006 Updated 7 Aug 2024

Remote attackers can upload arbitrary files via the WidgEd plugin, potentially leading to code execution.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2006-6783?

CVE-2006-6783 is a high-severity vulnerability in n/a, published on 28 Dec 2006. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

logahead UNU 1.0 before 20061226 allows remote attackers to upload arbitrary files via unspecified vectors related to plugins/widged/_widged.php (aka the WidgEd plugin), possibly because of an authentication bypass. NOTE: some of these details are obtained from third party information.

Weakness: CWE-287

Which versions are affected by CVE-2006-6783?

It affects 1 product.

Products include Logahead Logahead Unu.

How do I fix CVE-2006-6783?

No fix has been published for CVE-2006-6783 yet. Limit exposure of the affected software until one is available.

Is CVE-2006-6783 being exploited?

There is no known exploitation of CVE-2006-6783 in the wild and no public exploit code.

CVE-2006-6887 File upload in n/a Medium 6.8

Sources

Also known as GHSA-x79m-w5p6-hc65.