CVE-2008-6822
published 2009-06-04CVE-2008-6822: Unrestricted file upload vulnerability in uploadp.php in New Earth Programming Team (NEPT) imgupload (aka Image Uploader) 1.0 allows remote attackers to…
PriorityP351high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
4.34%
90.0th percentile
Unrestricted file upload vulnerability in uploadp.php in New Earth Programming Team (NEPT) imgupload (aka Image Uploader) 1.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension and a modified content type, then accessing this file via a direct request, as demonstrated by an upload with an image/jpeg content type. NOTE: some of these details are obtained from third party information.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| newearthpt | imgupload | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://osvdb.org/49428http://secunia.com/advisories/32412http://www.securityfocus.com/bid/31909https://exchange.xforce.ibmcloud.com/vulnerabilities/46089https://www.exploit-db.com/exploits/6830http://osvdb.org/49428http://secunia.com/advisories/32412http://www.securityfocus.com/bid/31909https://exchange.xforce.ibmcloud.com/vulnerabilities/46089https://www.exploit-db.com/exploits/6830
2009-06-04
Published