CVE-2008-2574

Published: Jun 6, 2008Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Unrestricted file upload vulnerability in admin/Editor/imgupload.php in FlashBlog 0.31 beta allows remote attackers to execute arbitrary code by uploading a .php file, then accessing it via a direct request to the file in tus_imagenes/.

Affected (1)

Products: Flashblog: Flashblog

Flashblog

1 product

Flashblog

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Flashblog Flashblog	Version 0.31 beta

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (12)

http://securityreason.com/securityalert/3928

Source: cve@mitre.org

http://www.dumenci.net/web-action/flashblog-beta0.31-remote-file-upload-vulnerability.html

Source: cve@mitre.org

Exploit

http://www.flashblog.org

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/492738/100/0/threaded

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/42820

Source: cve@mitre.org

https://www.exploit-db.com/exploits/5728

Source: cve@mitre.org

http://securityreason.com/securityalert/3928