Back to feed
EUVD-2008-0812 · Published Feb 19, 2008
Unrestricted file upload vulnerability in image.php in PHPizabi 0.848b C1 HFP1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension from the event page, then accessing it via a direct request to the file in system/cache/pictures.
Technologies
Reality Medias Phpizabi
Weaknesses
CWE-264
CVSS scores
- v2.09.3
AV:N/AC:M/Au:N/C:C/I:C/A:C
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
