CVE-2008-0233

Summary

Unrestricted file upload vulnerability in Zero CMS 1.0 Alpha and earlier allows remote attackers to bypass intended access restrictions and upload and execute arbitrary files by uploading an avatar file with an accepted Content-Type such as image/jpeg.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://packetstormsecurity.org/0801-exploits/zerocms-sql.txt
• https://www.exploit-db.com/exploits/4864

References

• http://packetstormsecurity.org/0801-exploits/zerocms-sql.txt
• https://www.exploit-db.com/exploits/4864

• ←Previous
• Next→