CVE-2008-0632 Unrestricted file upload vulnerability in cp_upload_image.php in LightBlog 9.5 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via...
HighCVSS 9.3
EPSS 6.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unrestricted file upload vulnerability in cp_upload_image.php in LightBlog 9.5 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the blog's root directory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lightblog | = 9.5 | No fix listed |
References
- omni.netsons.org
- 28734 third-party-advisory vendor-advisory
- 3617 third-party-advisory
- 20080201 LightBlog Remote File Upload Vulnerability mailing-list
- 27562 vdb-entry
- 5033 exploit