CVE-2008-6785

CVE-2008-6785 concerns an unrestricted file upload vulnerability in Mini File Host 1.5. An attacker could upload a file with an executable extension and access it directly to execute arbitrary code. The vulnerability is triggered by placing a crafted file (e.g., name.php) in an unspecified direct...

CVE-2008-0357

CVE-2008-0357 affects Galaxyscripts Mini File Host 1.2.1 and earlier. The vulnerability is a directory traversal flaw in pages/upload.php that allows remote attackers to include and execute arbitrary local files via traversal sequences in the language parameter. The NVD entry assigns a CVSS v2 ba...