← back
CVE-2008-6793

CVE-2008-6793

EPSS 6.9%
The get_file_type function in lib/file_content.php in DFLabs PTK 0.1, 0.2, and 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters after an arg1= sequence in a filename within a forensic image.
Affected products
n/a · n/a
public PoCs found — 1
cve_referencewww.exploit-db.com/exploits/7001unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://osvdb.org/49574http://secunia.com/advisories/32553https://exchange.xforce.ibmcloud.com/vulnerabilities/46380https://www.exploit-db.com/exploits/7001http://www.ikkisoft.com/stuff/LC-2008-07.txthttp://www.securityfocus.com/archive/1/498081/100/0/threadedhttp://www.securityfocus.com/bid/32128http://www.vupen.com/english/advisories/2008/3020