PT-2009-2397

CVE-2008-6928

·

Publicado

2009-08-11

·

Atualizado

2017-09-29

Descrição por

CVSS 2.0
6.5
Média
MétricasAV:N/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions: PHPStore Complete Classifieds (affected versions not specified)
Description: The issue allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a logo, then accessing it via a direct request to the file in "classifieds1/yellow images/".
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Explorabilidade
Exploit
Pesquisadores
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-264
Identificadores relacionados
CVE-2008-6928
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com