CVE-2008-3178

Published: Jul 15, 2008Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Unrestricted file upload vulnerability in upload_pictures.php in WebXell Editor 0.1.3 allows remote attackers to execute arbitrary code by uploading a .php file with a jpeg content type, then accessing it via a direct request to the file in upload/.

Affected (1)

Products: Webxell: Webxell Editor

Webxell

1 product

Webxell Editor

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Webxell Webxell Editor	Version 0.1.3

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (12)

http://secunia.com/advisories/30948

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/3991

Source: cve@mitre.org

http://www.securityfocus.com/bid/30117

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/2016/references

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/43596

Source: cve@mitre.org

https://www.exploit-db.com/exploits/6015

Source: cve@mitre.org

http://secunia.com/advisories/30948