CVE-2009-4098

Unrestricted file upload vulnerability in banner-edit.php in OpenX adserver 2.8.1 and earlier allows remote authenticated users with banner / file upload…

published November 28, 2009

CVSS

—

EPSS

19%

Percentile

97.3

In the wild

Unconfirmed

What it is

Unrestricted file upload vulnerability in banner-edit.php in OpenX adserver 2.8.1 and earlier allows remote authenticated users with banner / file upload permissions to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an images directory.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.18676 · 97.3th percentile
Published: 2009-11-28T11:00Z

EPSS history

Timeline

28 NOV 11:00Z
Unrestricted file upload vulnerability in banner-edit.php in OpenX adserver 2.8.1 and earlier allows remote authenticated users with banner / file upload…
cvelistv5