Lucene search

MitreCVE-2008-6822

HistoryJun 04, 2009 - 4:30 p.m.

CVE-2008-6822

2009-06-0416:30:00

mitre

web.nvd.nist.gov

cve-2008-6822

unrestricted file upload

nept imgupload

remote code execution

file upload vulnerability

information security

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.9

Confidence

Low

EPSS

0.053

Percentile

93.1%

JSON

Unrestricted file upload vulnerability in uploadp.php in New Earth Programming Team (NEPT) imgupload (aka Image Uploader) 1.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension and a modified content type, then accessing this file via a direct request, as demonstrated by an upload with an image/jpeg content type. NOTE: some of these details are obtained from third party information.

Affected configurations

Nvd

Node

newearthptimguploadMatch1.0

VendorProductVersionCPE
newearthptimgupload1.0cpe:2.3:a:newearthpt:imgupload:1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
newearthpt	imgupload	1.0	cpe:2.3:a:newearthpt:imgupload:1.0:::::::*

References

osvdb.org/49428

secunia.com/advisories/32412

www.securityfocus.com/bid/31909

exchange.xforce.ibmcloud.com/vulnerabilities/46089

www.exploit-db.com/exploits/6830

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.9

Confidence

Low

EPSS

0.053

Percentile

93.1%

JSON

Related for CVE-2008-6822