CVE

Id
36647  
CVE No.
CVE-2008-6530  
Status
Candidate  
Description
Unrestricted file upload vulnerability in editimage.php in eZoneScripts Living Local 1.1 allows remote authenticated administrators to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the uploaded file.  
Phase
Assigned (20090326)  
Votes
None (candidate not yet proposed)  
Comments