CVE-2008-5732

Published: Dec 26, 2008Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Unrestricted file upload vulnerability in lib/image_upload.php in KafooeyBlog 1.55b allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file.

Affected (1)

Products: Kafooeyblog: Kafooeyblog

Kafooeyblog

1 product

Kafooeyblog

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Kafooeyblog Kafooeyblog	Version 1.55b

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (12)

http://osvdb.org/50876

Source: cve@mitre.org

http://secunia.com/advisories/33223

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/4812

Source: cve@mitre.org

http://www.securityfocus.com/bid/32953

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/47535

Source: cve@mitre.org

https://www.exploit-db.com/exploits/7537

Source: cve@mitre.org

http://osvdb.org/50876