Unrestricted file upload

2009-07-0719:00:00

PRIOn knowledge base

www.prio-n.com

8 High

AI Score

Confidence

Low

0.025 Low

EPSS

Percentile

90.1%

JSON

Unrestricted file upload vulnerability in index.php in phpGreetCards 3.7 allows remote attackers to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a via a link that is listed by userfiles/number_shell.php.

CPENameOperatorVersion
phpgreetcardseq3.7

CPE	Name	Operator	Version
	phpgreetcards	eq	3.7

References

osvdb.org/50988

secunia.com/advisories/33304

www.securityfocus.com/bid/32995

www.vupen.com/english/advisories/2008/3510

exchange.xforce.ibmcloud.com/vulnerabilities/47591

www.exploit-db.com/exploits/7561