CVE-2008-0632
LightBlog 9.5 - Unauthenticated Arbitrary File Upload via cp_upload_image.php
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-0632. PoCs published by Omni.
AI-analyzed exploit summary This is a writeup describing a remote file upload vulnerability in LightBlog 9.5, where unauthenticated users can upload malicious PHP files via cp_upload_image.php. The PoC outlines the steps to exploit the vulnerability but does not include actual exploit code.
Description
Unrestricted file upload vulnerability in cp_upload_image.php in LightBlog 9.5 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the blog's root directory.
Exploits (1)
This is a writeup describing a remote file upload vulnerability in LightBlog 9.5, where unauthenticated users can upload malicious PHP files via cp_upload_image.php. The PoC outlines the steps to exploit the vulnerability but does not include actual exploit code.