cbcvebase.

Kwalbum vulnerabilities

1 known vulnerability affecting kwalbum/kwalbum.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2008-5677P3HIGHCVSS 7.1PoC≤ 2.0.2v0.5.1+37 more2008-12-19
CVE-2008-5677 [HIGH] CWE-20 CVE-2008-5677: Unrestricted file upload vulnerability in Kwalbum 2.0.4, 2.0.2, and earlier, when PICS_PATH is locat Unrestricted file upload vulnerability in Kwalbum 2.0.4, 2.0.2, and earlier, when PICS_PATH is located in the web root, allows remote authenticated users with upload capability to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file under items/, related to the ReplaceBadFilenameChars
nvd
Kwalbum vulnerabilities | cvebase