critical10.0Public exploit code
CVE-2008-0251
Unrestricted file upload vulnerability in PhotoPost vBGallery before 2.4.2 allows remote attackers to upload and execute arbitrary files via unknown vectors.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PhotoPost vBGallery 2.4.2 - Arbitrary File Upload2008-07-15 · webapps · php · Verified
Impact
Unrestricted file upload vulnerability in PhotoPost vBGallery before 2.4.2 allows remote attackers to upload and execute arbitrary files via unknown vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Photopost | Photopost Vbgallery | through 2.4.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/28430
- http://www.photopost.com/forum/showthread.php?t=134909
- http://www.photopost.com/forum/showthread.php?t=134910
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39621
- http://secunia.com/advisories/28430
- http://www.photopost.com/forum/showthread.php?t=134909
- http://www.photopost.com/forum/showthread.php?t=134910
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39621