Lucene search
HistoryMar 02, 2009 - 7:30 p.m.
CVE-2008-6367
cve-2008-6367
file upload
vulnerability
social groupie
nvd
8.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:S/C:C/I:C/A:C
7.5 High
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
77.1%
Unrestricted file upload vulnerability in Photos/create_album.php in Social Groupie allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in Member_images/.
Affected configurations
Node
socialgroupiesocial_groupieMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| socialgroupie:social_groupie | socialgroupie social groupie | eq | - |
Related
prion
prion
Unrestricted file upload
2009-03-02 19:30:00
cvelist
cvelist
CVE-2008-6367
2009-03-02 19:00:00
nvd
nvd
CVE-2008-6367
2009-03-02 19:30:00
8.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:S/C:C/I:C/A:C
7.5 High
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
77.1%
Related for CVE-2008-6367