medium6.8Public exploit code
CVE-2008-6785
Unrestricted file upload vulnerability in Mini File Host 1.5 allows remote attackers to execute arbitrary code by uploading a file with an executable extension…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Mini File Host 1.5 - Arbitrary File Upload2009-12-22 · webapps · php · Verified
- Mini File Host 1.x - Arbitrary '.PHP' File Upload2008-12-18 · webapps · php · Verified
Impact
Unrestricted file upload vulnerability in Mini File Host 1.5 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory, as demonstrated by creating a name.php file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Galaxyscripts | Mini File Host | Version 1.5 |