CVE-2008-3178
WebXell Editor 0.1.3 - Remote Code Execution via Unrestricted File Upload
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-3178. PoCs published by CWH Underground.
AI-analyzed exploit summary This exploit demonstrates an arbitrary file upload vulnerability in WebXell Editor 0.1.3 via the upload_pictures.php script. It allows an attacker to upload a malicious PHP file by intercepting and modifying a multipart/form-data POST request.
Description
Unrestricted file upload vulnerability in upload_pictures.php in WebXell Editor 0.1.3 allows remote attackers to execute arbitrary code by uploading a .php file with a jpeg content type, then accessing it via a direct request to the file in upload/.
Exploits (1)
This exploit demonstrates an arbitrary file upload vulnerability in WebXell Editor 0.1.3 via the upload_pictures.php script. It allows an attacker to upload a malicious PHP file by intercepting and modifying a multipart/form-data POST request.