CVE-2008-3117

Unrestricted file upload vulnerability in update_profile.php in PHPmotion 2.0 and earlier allows remote authenticated users to execute arbitrary code by…

published July 10, 2008

CVSS
—
EPSS
3%
Percentile
88.2
In the wild
Unconfirmed
What it is

Unrestricted file upload vulnerability in update_profile.php in PHPmotion 2.0 and earlier allows remote authenticated users to execute arbitrary code by uploading a .php file with a content type of (1) image/gif, (2) image/jpeg, or (3) image/pjpeg, then accessing it via a direct request to the file under pictures/.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03253 · 88.2th percentile
Published
2008-07-10T17:00Z
EPSS history
Timeline
  • 10 JUL 17:00Z
    Unrestricted file upload vulnerability in update_profile.php in PHPmotion 2.0 and earlier allows remote authenticated users to execute arbitrary code by…
    cvelistv5