Vulnerabilities

TI-2006-06630 CVE-2006-6887 · GHSA-wxqx-h8v6-v72p

Unrestricted file upload vulnerability in logahead UNU 1.0 allows remote attackers to…

LOW 34

Unrestricted file upload vulnerability in logahead UNU 1.0 allows remote attackers to upload and execute arbitrary PHP code via unspecified vectors related to plugins/widged/_widged.php (aka the WidgEd plugin), a differe…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01775 Published 2007-01-05 No fix listed CWE-94

TI-2006-06527 CVE-2006-6783 · GHSA-x79m-w5p6-hc65

logahead UNU 1.0 before 20061226 allows remote attackers to upload arbitrary files via…

LOW 37

logahead UNU 1.0 before 20061226 allows remote attackers to upload arbitrary files via unspecified vectors related to plugins/widged/_widged.php (aka the WidgEd plugin), possibly because of an authentication bypass.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01962 Published 2006-12-28 No fix listed CWE-287

Vulnerabilities

Filters

Unrestricted file upload vulnerability in logahead UNU 1.0 allows remote attackers to…

logahead UNU 1.0 before 20061226 allows remote attackers to upload arbitrary files via…