CVE-2008-6914

Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

Published: 07/08/2009 Updated: 29/09/2017

CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8

VMScore: 655

Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

Unrestricted file upload vulnerability in viewprofile.php in Zeeways ZEEPROPERTY 1.0 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a photo in a profile modification, then accessing a related file via a direct request to the file in companylogo/.

Vulnerable Product	Search on Vulmon	Subscribe to Product
zeeways zeeproperty 1.0

ZEEPROPERTY v10 remote file Upload & XSS author: ZoRLu msn: trt-turk@hotmailcom home: wwwz0rlublogspotcom dork: "Designed & Developed by Zeewayscom" first register to site you add this code your shell to head GIF89a; example your_shellphp: GIF89a; <? ?> and save your_sheellphp after login to site ...

CWE-264 http://www.securityfocus.com/bid/32224 https://exchange.xforce.ibmcloud.com/vulnerabilities/46503 https://www.exploit-db.com/exploits/7058 https://nvd.nist.gov https://www.exploit-db.com/exploits/7058/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2008-6914

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect