CVE-2008-6684

CVE-2008-6684 describes an unrestricted file upload vulnerability in editimage.php of the Apartment Search Script. An attacker can upload a file with an executable extension bearing a GIF header and then access the renamed file via a direct request to Elephant/Member_Admin/logo/ to execute arbitr...

CVE-2008-6530

The CVE-2008-6530 entry describes an Unrestricted file upload in editimage.php of eZoneScripts Living Local 1.1 . The vulnerability permits remote authenticated administrators to upload a file with an executable extension and then access it directly to execute arbitrary PHP code. This can comprom...