CVE-2008-6913

Published: Aug 7, 2009Modified: Apr 23, 2026

6.5

Vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability: 8.0 / Impact: 6.4

Source: NVD

Description

Unrestricted file upload vulnerability in editresume_next.php in Zeeways ZEEJOBSITE 2.0 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a photo in a profile edit action, then accessing the file via a direct request to jobseekers/logos/.

Affected (1)

Products: Zeeways: Zeejobsite

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Zeeways Zeejobsite	Version 2.0

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (8)

http://www.securityfocus.com/bid/32225

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/3072

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/46505

Source: cve@mitre.org

https://www.exploit-db.com/exploits/7062

Source: cve@mitre.org

http://www.securityfocus.com/bid/32225

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/3072

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/46505

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.exploit-db.com/exploits/7062

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.