PT-2008-5978 · Php Nuke · Php-Nuke

Published 2008-10-28 · Updated 2019-07-01 · CVE-2008-4767

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions PHP-Nuke (affected versions not specified)

Description The issue allows remote attackers to potentially execute arbitrary code by uploading files with certain extensions, including .htm, .html, or .txt, and then accessing them directly. However, it is unclear how the upload of .html or .txt files could lead to arbitrary code execution, as this might be a legitimate functionality.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2008-4767

Affected Products

Php-Nuke

References · 5

• 🔥 https://exploit-db.com/exploits/31702 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-4767 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42007 · Note
• http://securityfocus.com/bid/28919 · Note
• http://juniper.net/security/auto/vulnerabilities/vuln28919.html · Note