CVE-2008-0373 Unrestricted file upload vulnerability in PHP F1 Max's File Uploader allows remote attackers to upload and execute arbitrary PHP files.

HighCVSS 7.5 EPSS 2.2%

Published: 2008-01-22 21:00
Updated: 2026-06-17 01:49
Exploit status: No public exploit known

Sign in for asset impact Search another CVE

Description

Unrestricted file upload vulnerability in PHP F1 Max's File Uploader allows remote attackers to upload and execute arbitrary PHP files.

Affected products

Product	Affected versions	Fixed in
php f1 maxs file uploader	All versions	No fix listed

References

3572 third-party-advisory
20080115 Max's File Uploader File Upload Vulnerability mailing-list
27285 vdb-entry
max-index-file-upload(39740) vdb-entry

CVSS v2.0

7.5 High

AV:N/AC:L/Au:N/C:P/I:P/A:P

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: Partial
Integrity: Partial
Availability: Partial

Weakness & likelihood

EPSS (exploitation probability, 30 days): 2.18% (percentile 82.6)
CWE: CWE-20

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.