CVE-2008-6638 Insecure method vulnerability in the Versalsoft HTTP Image Uploader ActiveX control (UUploaderSvrD.dll 6.0.0.35) allows remote attackers to delete arbitrary files via the RemoveFileOrDir method.
HighCVSS 8.8
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Insecure method vulnerability in the Versalsoft HTTP Image Uploader ActiveX control (UUploaderSvrD.dll 6.0.0.35) allows remote attackers to delete arbitrary files via the RemoveFileOrDir method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| versalsoft http file upload activex control | = 6.0.0.35 | No fix listed |
References
- 28301 exploit vdb-entry
- httpfileupload-activex-file-delete(41258) vdb-entry
- 5272 exploit
- 5569 exploit