PT-2008-1895 · Photopost · Photopost Vbgallery

Publicado 2008-01-12 · Atualizado 2017-08-08 · CVE-2008-0251

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions PhotoPost vBGallery versions prior to 2.4.2

Description The issue allows remote attackers to upload and execute arbitrary files.

Recommendations For versions prior to 2.4.2, update to version 2.4.2 or later to resolve the issue.

Exploit

Correção

Code Injection

RCE

Enumeração de Fraquezas

CWE-94

CWE-20

Identificadores relacionados

CVE-2008-0251

Produtos afetados

Photopost Vbgallery

Referências · 6

• 🔥 https://exploit-db.com/exploits/6082 · Exploit
• http://photopost.com/forum/showthread.php?t=134909 · Nota
• http://photopost.com/forum/showthread.php?t=134910 · Nota
• http://secunia.com/advisories/28430 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-0251 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39621 · Nota