CVE-2008-2988 Unrestricted file upload vulnerability in admin/upload.php in Benja CMS 0.1 allows remote attackers to upload and execute arbitrary PHP files via unspecified vectors, followed by a direct request to t...
HighCVSS 7.5
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unrestricted file upload vulnerability in admin/upload.php in Benja CMS 0.1 allows remote attackers to upload and execute arbitrary PHP files via unspecified vectors, followed by a direct request to the file in billeder/.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| benjacms benja cms | = 0.1 | No fix listed |
References
- 30834 third-party-advisory vendor-advisory
- 3958 third-party-advisory
- 20080622 Benja CMS 0.1 (Upload/XSS) Multiple Remote Vulnerabilities mailing-list
- 29884 exploit vdb-entry
- benja-upload-file-upload(43282) vdb-entry