Vulnerability Database

296,322

Total vulnerabilities in the database

CVE-2008-1495

Unrestricted file upload vulnerability in administrer/produits.php in PEEL, possibly 3.x and earlier, allows remote authenticated administrators to upload and execute arbitrary PHP files via a modified content type in an ajout action, as demonstrated by (1) image/gif and (2) application/pdf.

  • Published: Mar 25, 2008
  • Updated: Apr 13, 2023
  • CVE: CVE-2008-1495
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6.5
  • AV:N/AC:L/Au:S/C:P/I:P/A:P

CWEs:

Software From Fixed in
peel / peel 2.7 2.7.x
peel / peel 2.6 2.6.x
peel / peel 1.0b 1.0b.x