CVE-2008-2267

Incomplete blacklist vulnerability in javaUpload.php in Postlet in the FileManager module in CMS Made Simple 1.2.4 and earlier allows remote attackers to…

published May 16, 2008

CVSS
—
EPSS
5%
Percentile
91.9
In the wild
Unconfirmed
What it is

Incomplete blacklist vulnerability in javaUpload.php in Postlet in the FileManager module in CMS Made Simple 1.2.4 and earlier allows remote attackers to execute arbitrary code by uploading a file with a name ending in (1) .jsp, (2) .php3, (3) .cgi, (4) .dhtml, (5) .phtml, (6) .php5, or (7) .jar, then accessing it via a direct request to the file in modules/FileManager/postlet/.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04808 · 91.9th percentile
Published
2008-05-16T06:54Z
EPSS history
Timeline
  • 16 MAY 06:54Z
    Incomplete blacklist vulnerability in javaUpload.php in Postlet in the FileManager module in CMS Made Simple 1.2.4 and earlier allows remote attackers to…
    cvelistv5