CVE-2008-2216 Unrestricted file upload vulnerability in src/yopy_upload.php in Project-Based Calendaring System (PBCS) 0.7.1 allows remote authenticated users to upload arbitrary files to tmp/uploads.
HighCVSS 9.0
EPSS 2.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unrestricted file upload vulnerability in src/yopy_upload.php in Project-Based Calendaring System (PBCS) 0.7.1 allows remote authenticated users to upload arbitrary files to tmp/uploads.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pbcs project-based calendaring system | = 0.7.1 | No fix listed |
References
- 28991 exploit vdb-entry
- pbcs-yopyupload-file-upload(42105) vdb-entry
- 5523 exploit