CVE-2008-6806

Unrestricted file upload vulnerability in includes/imageupload.php in 7Shop 1.1 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in images/artikel/...

CVE-2008-6806

The CVE-2008-6806 entry concerns 7Shop 1.1 and earlier, where an unrestricted file upload flaw in includes/imageupload.php can enable remote code execution. An attacker can upload a file with an executable extension and then access it via a direct request to the file under images/artikel/, leadin...