CVE-2008-6978

2009-08-19T05:24:00
ID CVE-2008-6978
Type cve
Reporter cve@mitre.org
Modified 2017-09-29T01:33:00

Description

Unrestricted file upload vulnerability in Full Revolution aspWebAlbum 3.2 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in pics/, related to the uploadmedia action in album.asp.