6.8
CVSSv2

CVE-2008-6750

Published: 24/04/2009 Updated: 29/09/2017
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 685
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

Unrestricted file upload vulnerability in add.php in FlexPHPDirectory 0.0.1 allows remote malicious users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in photo/.

Vulnerable Product Search on Vulmon Subscribe to Product

china-on-site flexphpdirectory 0.0.1

Exploits

############################################# Autore: x0r Email: andry2000@hotmailit Site: w00tz0nealtervistaorg/indexphp Cms: Flexphpdiren Version: 001 Download: wwwchina-on-sitecom/flexphpdir/ ############################################## Bug In \admin\usercheckphp 'n' \addphp $sql = "select username,adminid from linkex ...