Vulnerability Database

289,689

Total vulnerabilities in the database

CVE-2008-3239

Unrestricted file upload vulnerability in the writeLogEntry function in system/v_cron_proc.php in PHPizabi 0.848b C1 HFP1, when register_globals is enabled, allows remote attackers to upload and execute arbitrary code via a filename in the CONF[CRON_LOGFILE] parameter and file contents in the CONF[LOCALE_LONG_DATE_TIME] parameter.

  • Published: Jul 21, 2008
  • Updated: Apr 13, 2023
  • CVE: CVE-2008-3239
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 9.3
  • AV:N/AC:M/Au:N/C:C/I:C/A:C

CWEs:

Software From Fixed in
phpizabi / phpizabi 0.848b-c1 0.848b-c1.x
phpizabi / phpizabi 0.848b-c1_hfp1 0.848b-c1_hfp1.x