CVE-2008-6768

2009-04-2918:06:00

mitre

www.cve.org

7.6 High

AI Score

Confidence

High

0.055 Low

EPSS

Percentile

93.3%

JSON

Unrestricted file upload vulnerability in admin/editor/images.php in K&S Shopsoftware allows remote attackers to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the file in images/upload/.