CVE-2008-0805 Unrestricted file upload vulnerability in image.php in PHPizabi 0.848b C1 HFP1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension from the event page, t...
HighCVSS 9.3
EPSS 5.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Unrestricted file upload vulnerability in image.php in PHPizabi 0.848b C1 HFP1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension from the event page, then accessing it via a direct request to the file in system/cache/pictures.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| reality medias phpizabi | = 0.848b | No fix listed |
References
- 27847 vdb-entry
- ADV-2008-0585 vdb-entry
- 5136 exploit