CVE-2008-6806 Unrestricted file upload vulnerability in includes/imageupload.php in 7Shop 1.1 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then acc...
MediumCVSS 6.8
EPSS 4.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Unrestricted file upload vulnerability in includes/imageupload.php in 7Shop 1.1 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in images/artikel/.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| 7-shop 7shop | <= 1.1 | No fix listed |
| 7-shop 7shop | = 0.9_beta | No fix listed |
| 7-shop 7shop | = 1.0 | No fix listed |
References
- 31978 exploit vdb-entry
- ADV-2008-2965 vdb-entry vendor-advisory
- 7shop-imageupload-file-upload(46184) vdb-entry
- 6866 exploit