CVE-2008-7209

Unrestricted file upload vulnerability in the add2 action in a_upload.php in OneCMS 2.4, and possibly earlier, allows remote attackers to execute arbitrary…

published September 11, 2009

CVSS
—
EPSS
6%
Percentile
93.3
In the wild
Unconfirmed
What it is

Unrestricted file upload vulnerability in the add2 action in a_upload.php in OneCMS 2.4, and possibly earlier, allows remote attackers to execute arbitrary code by uploading a file with an executable extension and using a safe content type such as image/gif, then accessing it via a direct request to the file in an unspecified directory.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06007 · 93.3th percentile
Published
2009-09-11T16:00Z
EPSS history
Timeline
  • 11 SEP 16:00Z
    Unrestricted file upload vulnerability in the add2 action in a_upload.php in OneCMS 2.4, and possibly earlier, allows remote attackers to execute arbitrary…
    cvelistv5