CVE-2008-2574

Unrestricted file upload vulnerability in admin/Editor/imgupload.php in FlashBlog 0.31 beta allows remote attackers to execute arbitrary code by uploading a…

published June 6, 2008

CVSS
—
EPSS
5%
Percentile
91.8
In the wild
Unconfirmed
What it is

Unrestricted file upload vulnerability in admin/Editor/imgupload.php in FlashBlog 0.31 beta allows remote attackers to execute arbitrary code by uploading a .php file, then accessing it via a direct request to the file in tus_imagenes/.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04781 · 91.8th percentile
Published
2008-06-06T22:00Z
EPSS history
Timeline
  • 06 JUN 22:00Z
    Unrestricted file upload vulnerability in admin/Editor/imgupload.php in FlashBlog 0.31 beta allows remote attackers to execute arbitrary code by uploading a…
    cvelistv5