CVE-2008-5732

CVE-2008-5732 affects KafooeyBlog 1.55b via an unrestricted file upload in lib/image_upload.php. The vulnerability permits remote code execution when an attacker uploads a file with an executable extension and then directly requests that file. The connected records corroborate the same descriptio...

CVE-2008-5732

creationtimestamp| type| source ---|---|--- 2008-12-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7537...

CVE-2007-5732

The CVE-2007-5732 entry describes a directory traversal vulnerability in eLouai’s Force Download script (downloadfile.php) present as of 20071030 and earlier. An attacker can read arbitrary files by supplying a crafted file parameter. The issue arises in environments where the vendor’s internal-u...

CVE-2006-5732

The CVE-2006-5732 entry describes a SQL injection in the logout.php component of T.G.S. CMS prior to or equal to version 0.1.7, exploitable via the myauthorid cookie. The underlying flaw is an injection vulnerability in a logout routine that permits remote attackers to execute arbitrary SQL comma...