CVE-2008-6684

Yourfreeworld Apartment Search Script - Improper Input Validation

Title source: rule

Description

Unrestricted file upload vulnerability in editimage.php in Apartment Search Script allows remote attackers to execute arbitrary code by uploading a file with an executable extension and a GIF header, then accessing this file via a direct request to a renamed file in Member_Admin/logo/.

Exploits (1)

exploitdb WORKING POC VERIFIED

by ZoRLu · textwebappsphp

https://www.exploit-db.com/exploits/6956

View Code ZIP pw:eip

References (3)

[Exploit] http://www.securityfocus.com/bid/32065

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/46283

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/6956

Scores

EPSS 0.0119

EPSS Percentile 78.5%

Classification

CWE

CWE-20

Status draft

Affected Products (1)

yourfreeworld/apartment_search_script

Timeline

Published Apr 10, 2009

Tracked Since Feb 18, 2026