CVE-2008-2475 eBay Enhanced Picture Uploader ActiveX control (EPUWALcontrol.dll) before 1.0.27 allows remote attackers to execute arbitrary commands via the PictureUrls property.
HighCVSS 9.3
EPSS 4.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
eBay Enhanced Picture Uploader ActiveX control (EPUWALcontrol.dll) before 1.0.27 allows remote attackers to execute arbitrary commands via the PictureUrls property.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ebay enhanced picture uploader activex control | <= 1.0.26 | No fix listed |
References
- 54968 vdb-entry
- pages.ebay.com vendor-advisory
- 35412 third-party-advisory
- VU#983731 patch third-party-advisory us-government-resource
- 35248 vdb-entry