CVE-2008-6677

Quickersite - Code Injection

Title source: rule

Description

Unrestricted file upload vulnerability in fckeditor251/editor/filemanager/connectors/asp/upload.asp in QuickerSite 1.8.5 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file.

Exploits (1)

exploitdb WORKING POC
webappsphp
https://www.exploit-db.com/exploits/5733

References (4)

Scores

EPSS 0.0304
EPSS Percentile 86.7%

Details

CWE
CWE-94
Status published
Products (1)
quickersite/quickersite 1.8.5
Published Apr 08, 2009
Tracked Since Feb 18, 2026