VDB

GCVE-110-CERTCC-2007-339345

GCVE-110-CERTCC-2007-339345
Advisory Published
Vulnetix · Advisory published January 24, 2008
GE Fanuc Proficy Information Portal allows authenticated users to upload arbitrary files. An attacker could upload an executable server-side script (e.g., an .asp shell on a Microsoft Internet Information Server platform) and execute arbitrary commands with the privileges of the web server.
Download JSON Open in Console

Risk Scores

certcc-cam
certcc-cam
impact14population4exploitation0widely_known1score_current0.84ease_of_exploitation20
certcc-vrda
certcc-vrda
d1_impact3d1_population1d1_direct_report1

Aliases

CVE-2008-0175

References

GE Fanuc Proficy Information Portal allows arbitrary file upload and execution
advisory
GE Fanuc Proficy Information Portal allows arbitrary file upload and execution
url
GE Fanuc Proficy Information Portal allows arbitrary file upload and execution
url
GE Fanuc Proficy Information Portal allows arbitrary file upload and execution
url

Browse GCVE Records

73,866 records in the GCVE database · Updated July 19, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›