critical9.0Public exploit code
CVE-2008-2216
Unrestricted file upload vulnerability in src/yopy_upload.php in Project-Based Calendaring System (PBCS) 0.7.1 allows remote authenticated users to upload arbi…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Project Based Calendaring System (PBCS) 0.7.1 - Multiple Vulnerabilities2008-04-30 · webapps · php · Verified
Impact
Unrestricted file upload vulnerability in src/yopy_upload.php in Project-Based Calendaring System (PBCS) 0.7.1 allows remote authenticated users to upload arbitrary files to tmp/uploads.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pbcs | Project-Based Calendaring System | Version 0.7.1 |