Lucene search
HistoryMar 26, 2009 - 9:00 p.m.
CVE-2008-6530
cve-2008-6530
unrestricted file upload
editimage.php
ezonescripts living local 1.1
php code execution
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
7.4 High
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
73.0%
Unrestricted file upload vulnerability in editimage.php in eZoneScripts Living Local 1.1 allows remote authenticated administrators to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the uploaded file.
Affected configurations
Node
ezonescriptsliving_localMatch1.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| ezonescripts:living_local | ezonescripts living local | eq | 1.1 |
Related
nvd
nvd
CVE-2008-6530
2009-03-26 21:00:00
prion
prion
Unrestricted file upload
2009-03-26 21:00:00
cvelist
cvelist
CVE-2008-6530
2009-03-26 20:28:00
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
7.4 High
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
73.0%
Related for CVE-2008-6530