NVD

Id
1806  
Name
CVE-2008-1866  
Description
admin/modif_config.php in Blog Pixel Motion (aka PixelMotion) does not require admin authentication, which allows remote authenticated users to upload arbitrary PHP scripts in a ZIP archive, which is written to templateZip/ and then automatically extracted under templates/ for execution via a direct request.  
Reject
 
CVSS Version
2  
CVSS Score
9  
Severity
High  
CVSS Base Score
9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-04-17  
Modified Date
2011-03-07  
Seq
2008-1866  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
11749 1806 CVE-2008-1866 5381  View
11750 1806 CVE-2008-1866 28646  View
11751 1806 CVE-2008-1866 ADV-2008-1121  View
11752 1806 CVE-2008-1866 blogpixelmotion-modifconfig-file-upload(41670)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
50389 JVNDB-2008-005699 Blog Pixel Motion の admin/modif_config.php における任意の PHP スクリプトをアップロードされる脆弱性 Blog Pixel Motion の admin/modif_config.php は、管理認証を必要としないため、ZIP アーカイブ内の任意の PHP スクリプトをアップロードされる脆弱性が存在します。 CVE-2008-1866 31979 CVE-2008-1866 1806 9 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005699.html 2008-04-17 2012-12-20 View