CVE-2008-2833

admin/upload.php in le.cms 1.4 and earlier allows remote attackers to bypass administrative authentication, and upload and execute arbitrary files in images/, via a nonzero value for the submit0 parameter in conjunction with filenames in the filename and upload parameters.

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

4.13% chance of exploitation in the next 30 days, 90th percentile

Published

2008-06-24

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/5887

References

• CVE Record
• NVD entry

Related

• CVE-2008-2832
• CVE-2008-2834
• CVE-2008-2830
• CVE-2008-2835
• CVE-2008-2827
• CVE-2008-2836