Vulnerability identifier: #VU44488

Vulnerability risk: Low

CVSSv3.1: 4.8 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C]

CVE-ID: CVE-2011-4275

CWE-ID: CWE-79

Exploitation vector: Network

Exploits in database: 6

• August 11, 2020
  • Open Flash Chart 2 - Arbitrary File Upload (Metasploit) [Exploit-DB]
  • OpenEMR - Arbitrary .PHP File Upload (Metasploit) [Exploit-DB]
  • Piwik Open Flash Chart - Remote Code Execution [Exploit-DB]
  • OpenEMR 4.1.1 - 'ofc_upload_image.php' Arbitrary File Upload [Exploit-DB]
  • Joomla! Component com_civicrm 4.2.2 - Remote Code Injection [Exploit-DB]
  • ZonPHP 2.25 - Remote Code Execution (Remote Code Execution) [Exploit-DB]

Impact: Data manipulation

Vulnerable software:
iTop
Web applications / Other software

Vendor: Combodo