CVE-2008-0233 | BDVDB-2026-28656 Detail

Description#

Unrestricted file upload vulnerability in Zero CMS 1.0 Alpha and earlier allows remote attackers to bypass intended access restrictions and upload and execute arbitrary files by uploading an avatar file with an accepted Content-Type such as image/jpeg.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://packetstormsecurity.org/0801-exploits/zerocms-sql.txt
https://www.exploit-db.com/exploits/4864

Exploit#

https://www.exploit-db.com/exploits/4864

History#

Version 12008-01-11Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.