medium6.8Public exploit code
CVE-2008-2648
Unrestricted file upload vulnerability in upload/uploader.html in meBiblio 0.4.7 allows remote attackers to execute arbitrary code by uploading a .php file, th…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- mebiblio 0.4.7 - SQL Injection / Arbitrary File Upload / Cross-Site Scripting2008-06-01 · webapps · php · Verified
Impact
Unrestricted file upload vulnerability in upload/uploader.html in meBiblio 0.4.7 allows remote attackers to execute arbitrary code by uploading a .php file, then accessing it via a direct request to the files/ directory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mebiblio | Mebiblio | Version 0.4.7 |