Lucene search
MitreCVE-2008-3117HistoryJul 10, 2008 - 5:41 p.m.
CVE-2008-3117
2008-07-1017:41:00
CWE-20
mitre
web.nvd.nist.gov
25
phpmotion
file upload vulnerability
cve-2008-3117
security
authentication
code execution
CVSS2
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
AI Score
7.3
Confidence
High
EPSS
0.007
Percentile
80.8%
Unrestricted file upload vulnerability in update_profile.php in PHPmotion 2.0 and earlier allows remote authenticated users to execute arbitrary code by uploading a .php file with a content type of (1) image/gif, (2) image/jpeg, or (3) image/pjpeg, then accessing it via a direct request to the file under pictures/.
Affected configurations
Node
phpmotionphpmotionRange≤2.0
ORphpmotionphpmotionMatch1.0
Related
prion
prion
Unrestricted file upload
2008-07-10 17:41:00
nvd
nvd
CVE-2008-3117
2008-07-10 17:41:00
cvelist
cvelist
CVE-2008-3117
2008-07-10 17:00:00
exploitdb
exploitdb
PHPmotion 2.0 - 'update_profile.php' Arbitrary File Upload
2008-06-25 00:00:00
CVSS2
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
AI Score
7.3
Confidence
High
EPSS
0.007
Percentile
80.8%
Related for CVE-2008-3117