Vulnerabilities > CVE-2008-6768 - Unspecified vulnerability in Shopsystem-Forum K&S Shopsoftware
Attack vector
NETWORK Attack complexity
MEDIUM Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
Unrestricted file upload vulnerability in admin/editor/images.php in K&S Shopsoftware allows remote attackers to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the file in images/upload/.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 1 |
Exploit-Db
description | K&S Shopsysteme Arbitrary Remote File Upload Vulnerability. CVE-2008-6768. Webapps exploit for php platform |
file | exploits/php/webapps/7500.txt |
id | EDB-ID:7500 |
last seen | 2016-02-01 |
modified | 2008-12-17 |
platform | php |
port | |
published | 2008-12-17 |
reporter | mNt |
source | https://www.exploit-db.com/download/7500/ |
title | K&S; Shopsysteme Arbitrary Remote File Upload Vulnerability |
type | webapps |