CVE-2008-6849 Unrestricted file upload vulnerability in index.php in phpGreetCards 3.7 allows remote attackers to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a...
MediumCVSS 6.8
EPSS 2.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Unrestricted file upload vulnerability in index.php in phpGreetCards 3.7 allows remote attackers to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a via a link that is listed by userfiles/number_shell.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| w2b phpgreetcards | = 3.7 | No fix listed |
References
- 50988 vdb-entry
- 33304 third-party-advisory vendor-advisory
- 32995 exploit vdb-entry
- ADV-2008-3510 vdb-entry vendor-advisory
- phpgreetcards-index-file-upload(47591) vdb-entry
- 7561 exploit