CVE-2008-6513 Unrestricted file upload vulnerability in saa.php in Andy's PHP Knowledgebase (aphpkb) 0.92.9 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then a...
MediumCVSS 6.8
EPSS 3.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unrestricted file upload vulnerability in saa.php in Andy's PHP Knowledgebase (aphpkb) 0.92.9 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a link that is listed by authors.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| aphpkb | = 0.92.9 | No fix listed |
References
- 34476 third-party-advisory
- sourceforge.net patch
- 32559 vdb-entry
- andysphpknowledgebase-saa-file-upload(46977) vdb-entry
- 7312 exploit