Unrated severityNVD Advisory· Published Jan 28, 2011· Updated Apr 29, 2026

CVE-2011-0678

Description

Unrestricted file upload vulnerability in the EasyEdit module in Lomtec ActiveWeb Professional 3.0 allows remote attackers to execute arbitrary code by uploading an executable file via the UploadDirectory and Accepted Extensions fields in the getImagefile component of EasyEdit.cfm.

Affected products

Lomtec/Activeweb
cpe:2.3:a:lomtec:activeweb:3.0:*:professional:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.exploitdevelopment.com/Vulnerabilities/2010-WEB-002.htmlnvdExploit
www.securityfocus.com/bid/45985nvdExploit
www.kb.cert.org/vuls/id/528212nvdUS Government Resource
osvdb.org/70669nvd
secunia.com/advisories/43031nvd
www.vupen.com/english/advisories/2011/0217nvd
exchange.xforce.ibmcloud.com/vulnerabilities/65013nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.018
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000