CVE-2008-3592

Unrestricted file upload vulnerability in the File Manager in the admin panel in Twentyone Degrees Symphony 1.7.01 and earlier allows remote attackers to…

published August 11, 2008

CVSS
—
EPSS
7%
Percentile
94.0
In the wild
Unconfirmed
What it is

Unrestricted file upload vulnerability in the File Manager in the admin panel in Twentyone Degrees Symphony 1.7.01 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension to a directory specified in the destination parameter, then accessing the uploaded file via a direct request, as demonstrated using workspace/masters/.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06807 · 94.0th percentile
Published
2008-08-11T23:00Z
EPSS history
Timeline
  • 11 AUG 23:00Z
    Unrestricted file upload vulnerability in the File Manager in the admin panel in Twentyone Degrees Symphony 1.7.01 and earlier allows remote attackers to…
    cvelistv5