7.5
CVSSv2

CVE-2008-6677

Published: 08/04/2009 Updated: 23/04/2009
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Unrestricted file upload vulnerability in fckeditor251/editor/filemanager/connectors/asp/upload.asp in QuickerSite 1.8.5 allows remote malicious users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file.

Vulnerable Product Search on Vulmon Subscribe to Product

quickersite quickersite 1.8.5

Exploits

########################## wwwBugReportir ####################################### # # AmnPardaz Security Research Team # # Title: QuickerSite Multiple Vulnerabilities # Vendor: wwwquickersitecom # Vulnerable Version: 185 # Exploit: Available # Impact: High # Fix: N/A # Original Advisory: bugreportir/indexphp?/39 ############## ...