CVE-2008-2574 Unrestricted file upload vulnerability in admin/Editor/imgupload.php in FlashBlog 0.31 beta allows remote attackers to execute arbitrary code by uploading a .php file, then accessing it via a direct r...
HighCVSS 7.5
EPSS 4.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unrestricted file upload vulnerability in admin/Editor/imgupload.php in FlashBlog 0.31 beta allows remote attackers to execute arbitrary code by uploading a .php file, then accessing it via a direct request to the file in tus_imagenes/.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| flashblog | = 0.31-beta | No fix listed |
References
- 3928 third-party-advisory
- www.dumenci.net exploit
- www.flashblog.org
- 20080529 FlashBlog Remote File Upload Vulnerability mailing-list
- flashblog-imgupload-file-upload(42820) vdb-entry
- 5728 exploit