CVE-2008-6769
YourPlace <= 1.0.2 - Authenticated Arbitrary File Upload via upload.php
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-6769. PoCs published by Osirys.
AI-analyzed exploit summary The exploit demonstrates multiple vulnerabilities in YourPlace 0.5 (beta 1), including database disclosure, arbitrary data saving leading to RCE, arbitrary file upload, PHPInfo disclosure, and user account manipulation. The Perl script provided automates the RCE exploit by injecting malicious PHP code into a writable file.
Description
Unrestricted file upload vulnerability in upload.php in YourPlace 1.0.2 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file.
Exploits (1)
The exploit demonstrates multiple vulnerabilities in YourPlace 0.5 (beta 1), including database disclosure, arbitrary data saving leading to RCE, arbitrary file upload, PHPInfo disclosure, and user account manipulation. The Perl script provided automates the RCE exploit by injecting malicious PHP code into a writable file.