VulnerabilityModified
CVE-2004-2743
upload.cgi in Mega Upload Progress Bar before 1.45 allows remote attackers to copy or overwrite arbitrary files via unspecified parameters related to names of uploaded files.
MEDIUM 6.4EPSS 1.45%
Does this matter?
Lower severity and a low EPSS score (1.45%). Track it; it rarely justifies an emergency change on its own.
Description
upload.cgi in Mega Upload Progress Bar before 1.45 allows remote attackers to copy or overwrite arbitrary files via unspecified parameters related to names of uploaded files.
- CVSS 2.0
- 6.4 MEDIUMAV:N/AC:L/Au:N/C:P/I:P/A:N
- EPSS
- 1.45% probability · 72th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- raditha dissanayake/mega upload progress bar
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/12993Patch, Vendor Advisory
- http://securitytracker.com/id?1011960
- http://sourceforge.net/project/shownotes.php?release_id=277989
- http://www.osvdb.org/11171
- http://www.raditha.com/blog/archives/000547.htmlPatch
- http://www.securityfocus.com/bid/11547
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17882
- http://secunia.com/advisories/12993Patch, Vendor Advisory
- http://securitytracker.com/id?1011960
- http://sourceforge.net/project/shownotes.php?release_id=277989
- http://www.osvdb.org/11171
- http://www.raditha.com/blog/archives/000547.htmlPatch
- http://www.securityfocus.com/bid/11547
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17882
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.