CVE-2008-6921
phpAdBoard 1.8 - Unauthenticated Arbitrary File Upload via Photoes Directory
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-6921. PoCs published by ahmadbady.
AI-analyzed exploit summary This exploit demonstrates a remote shell upload vulnerability in phpAdBoard. It allows an attacker to upload a malicious PHP file to the 'photoes' directory, leading to remote code execution.
Description
Unrestricted file upload vulnerability in index.php in phpAdBoard 1.8 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in photoes/.
Exploits (1)
This exploit demonstrates a remote shell upload vulnerability in phpAdBoard. It allows an attacker to upload a malicious PHP file to the 'photoes' directory, leading to remote code execution.