CVE

Id
37205  
CVE No.
CVE-2008-7088  
Status
Candidate  
Description
Unrestricted file upload vulnerability in upload.php in PhotoPost vBGallery 2.4.2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension followed by a safe extension, then accessing it via a direct request to the file in a certain path. NOTE: this may be the same vulnerability as CVE-2008-0251, but this is not clear due to lack of details from the vendor.  
Phase
Assigned (20090826)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
403974 37205 CVE-2008-7088 MILW0RM:6082  View
403975 37205 CVE-2008-7088 URL:http://www.milw0rm.com/exploits/6082  View
403976 37205 CVE-2008-7088 BID:30249  View
403977 37205 CVE-2008-7088 URL:http://www.securityfocus.com/bid/30249  View
403978 37205 CVE-2008-7088 XF:vbgallery-upload-file-upload(43845)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
44676 JVNDB-2009-005683 Unica Affinium Campaign におけるクロスサイトスクリプティングの脆弱性 Unica Affinium Campaign は、ステータスログが表示されている際適切に処理されていないため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-7092 37205 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005683.html  View