CVE-2008-6822

Published: 04/06/2009 Updated: 29/09/2017

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 755

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Unrestricted file upload vulnerability in uploadp.php in New Earth Programming Team (NEPT) imgupload (aka Image Uploader) 1.0 allows remote malicious users to execute arbitrary code by uploading a file with an executable extension and a modified content type, then accessing this file via a direct request, as demonstrated by an upload with an image/jpeg content type. NOTE: some of these details are obtained from third party information.

Vulnerable Product	Search on Vulmon	Subscribe to Product
newearthpt imgupload 1.0

//Title - NEPT Image Uploader shell upload //Vendor - newearthptfreehostiacom //Version - 10 //Status - vendor has been notified //Author - Dentrasi //Description It is possible to upload a php script to the remote site 1 Select a php file for upload 2 Select it for upload, and tamperdata the request 3 Change the Content-Type from 'a ...

NVD-CWE-Other http://www.securityfocus.com/bid/31909 http://osvdb.org/49428 http://secunia.com/advisories/32412 https://exchange.xforce.ibmcloud.com/vulnerabilities/46089 https://www.exploit-db.com/exploits/6830 https://nvd.nist.gov https://www.exploit-db.com/exploits/6830/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2008-6822

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect