Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 12/01/2008 Updated: 08/08/2017

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 1000

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Unrestricted file upload vulnerability in PhotoPost vBGallery prior to 2.4.2 allows remote malicious users to upload and execute arbitrary files via unknown vectors.

Vulnerable Product	Search on Vulmon	Subscribe to Product
photopost photopost vbgallery

vBulletin PhotoPost vBGallery v2x Remote File Upload Found by : Cold z3ro e-mail : exploiter@hackteachorg Home page : wwwHackps ============================== exploit usage : localhost/Forum/$gallery_path/uploadphp here the exploiter can upload php shell via this script by renamed it's name to $namephpwmv but first he should ...

CWE-94 CWE-20 http://www.photopost.com/forum/showthread.php?t=134909 http://www.photopost.com/forum/showthread.php?t=134910 http://secunia.com/advisories/28430 https://exchange.xforce.ibmcloud.com/vulnerabilities/39621 https://nvd.nist.gov https://www.exploit-db.com/exploits/6082/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2008-0251

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect