Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 20/04/2009 Updated: 29/09/2017

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 935

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Unrestricted file upload vulnerability in submitlink.php in FlexPHPLink Pro 0.0.7 allows remote malicious users to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the renamed file in linkphoto/.

Vulnerable Product	Search on Vulmon	Subscribe to Product
china-on-site flexphplink 0.0.7

#!/usr/bin/perl # HAPPY CHRISTMAS !! # Flexphplink Pro # wwwhotscriptscom/jumpphp?listing_id=21062&jump_type=1 # Bug: Arbitrary File Upload # * I coded this exploit just for fun ;) # Exploit coded by Osirys # osirys[at]live[dot]it # osirysorg # Greets: x0r, miclen, emgent, str0ke, Todd and AlpHaNiX # Example: # osirys[~]> ...

CWE-20 http://secunia.com/advisories/33343 http://www.osvdb.org/53187 http://www.securityfocus.com/bid/33034 https://exchange.xforce.ibmcloud.com/vulnerabilities/47614 https://www.exploit-db.com/exploits/7600 https://nvd.nist.gov https://www.exploit-db.com/exploits/7600/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2008-6731

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect