medium6.5Public exploit code
CVE-2008-1495
Unrestricted file upload vulnerability in administrer/produits.php in PEEL, possibly 3.x and earlier, allows remote authenticated administrators to upload and …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PEEL CMS 3.x - Admin Hash Extraction / Arbitrary File Upload2008-03-19 · webapps · php · Verified
Impact
Unrestricted file upload vulnerability in administrer/produits.php in PEEL, possibly 3.x and earlier, allows remote authenticated administrators to upload and execute arbitrary PHP files via a modified content type in an ajout action, as demonstrated by (1) image/gif and (2) application/pdf.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Peel | Peel | Versions 1.0b, 2.6, 2.7 |
Weakness classification
References
- NVD record
- CVE.org record
- http://realn.free.fr/releases/70207
- http://secunia.com/advisories/29466
- http://www.securityfocus.com/bid/28346
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41354
- https://www.exploit-db.com/exploits/5281
- http://realn.free.fr/releases/70207
- http://secunia.com/advisories/29466
- http://www.securityfocus.com/bid/28346
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41354
- https://www.exploit-db.com/exploits/5281