Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
10
CVSSv2

CVE-2008-2833

Published: 24/06/2008 Updated: 29/09/2017
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
VMScore: 1000
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Subscribe to Worldlevel

Vulnerability Summary

admin/upload.php in le.cms 1.4 and previous versions allows remote malicious users to bypass administrative authentication, and upload and execute arbitrary files in images/, via a nonzero value for the submit0 parameter in conjunction with filenames in the filename and upload parameters.

Vulnerable Product Search on Vulmon Subscribe to Product

worldlevel le.cms

Exploits

Exploit DB: LE.CMS 1.4 - Arbitrary File Upload
#!/usr/bin/perl use strict; use warnings; use LWP::UserAgent; use HTTP::Request::Common; print <<INTRO; - - - - - - - - - - - - - - - - - - - - - - - - - - - - - LECMS <= 14 Remote Arbitrary File Upload Exploit - - - - - - ...

References

CWE-287http://www.securityfocus.com/bid/29867http://www.securityfocus.com/bid/29872http://secunia.com/advisories/30797https://exchange.xforce.ibmcloud.com/vulnerabilities/43274https://www.exploit-db.com/exploits/5887https://nvd.nist.govhttps://www.exploit-db.com/exploits/5887/
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-29895blind SQL injectionCVE-2024-5064CVE-2023-52677CVE-2023-52682CVE-2024-30051CVE-2024-35849remote attackersremote
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook