Vulnerability in Reality Medias Phpizabi

CVE-2008-0805

Unrestricted file upload vulnerability in image.php in PHPizabi 0.848b C1 HFP1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension from the event page, then accessing it via a direct request to the file in system/cache/pictures.

EPSS: 0.052 (91.6th percentile) — read the EPSS interpretation.

Affected products

Reality Medias_phpizabi — versions 0.848b
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

cve@mitre.org (vdb-entry, x_refsource_VUPEN)
cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)