CVE-2008-7088
PhotoPost vBGallery 2.4.2 - Authenticated Arbitrary File Upload via Executable Extension Bypass
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-7088. PoCs published by Cold Zero.
AI-analyzed exploit summary This is a writeup describing a remote file upload vulnerability in vBulletin PhotoPost vBGallery v2.x. The exploit allows authenticated users to upload malicious PHP files by disguising them with a .wmv extension, leading to potential remote code execution.
Description
Unrestricted file upload vulnerability in upload.php in PhotoPost vBGallery 2.4.2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension followed by a safe extension, then accessing it via a direct request to the file in a certain path. NOTE: this may be the same vulnerability as CVE-2008-0251, but this is not clear due to lack of details from the vendor.
Exploits (1)
This is a writeup describing a remote file upload vulnerability in vBulletin PhotoPost vBGallery v2.x. The exploit allows authenticated users to upload malicious PHP files by disguising them with a .wmv extension, leading to potential remote code execution.