Secunia Logo  


Secunia PSI WorldMap
 
CVE Reference: CVE-2008-6942
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2008-6942

Description:
Unrestricted file upload vulnerability in ScriptsFeed Realtor Classifieds System (aka Real Estate Classifieds) allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a profile logo, then accessing it via a direct request to the file in re_images/.

CVE Status:
Candidate

References:

XF
  http://xforce.iss.net/xforce/xfdb/46609

SAID
  Secunia Advisory: SA32690

OSVDB
  49960

MILW0RM
  http://www.milw0rm.com/exploits/7110

BID
  32293


Return to the previous page.