Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2008-6568

Опубликовано: 31 мар. 2009
Источник: nvd
CVSS2: 6.8
EPSS Низкий

Описание

Unrestricted file upload vulnerability in Yehe 2.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the envoyer feature. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:yehe:yehe:2.0:*:*:*:*:*:*:*

EPSS

Процентиль: 79%
0.01258
Низкий

6.8 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

github
больше 3 лет назад

Unrestricted file upload vulnerability in Yehe 2.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the envoyer feature. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

EPSS

Процентиль: 79%
0.01258
Низкий

6.8 Medium

CVSS2

Дефекты

CWE-20