CVE-2008-6731 Unrestricted file upload vulnerability in submitlink.php in FlexPHPLink Pro 0.0.7 allows remote attackers to execute arbitrary PHP code by uploading a file with an executable extension, then accessing...
HighCVSS 9.3
EPSS 5.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Unrestricted file upload vulnerability in submitlink.php in FlexPHPLink Pro 0.0.7 allows remote attackers to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the renamed file in linkphoto/.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| china-on-site flexphplink | = 0.0.7 | No fix listed |
References
- 33343 third-party-advisory vendor-advisory
- 53187 vdb-entry
- 33034 exploit vdb-entry
- flexphplink-submitlink-file-upload(47614) vdb-entry
- 7600 exploit