CVE-2008-7005

EPSS 9.1%

include/modules/top/1-random_quote.php in Minb Is Not a Blog (minb) 0.1.0 allows remote attackers to execute arbitrary PHP code via the quotes_to_edit parameter. NOTE: this issue has been reported as an unrestricted file upload by some sources, but that is a potential consequence of code execution.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/6432unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/51805 https://exchange.xforce.ibmcloud.com/vulnerabilities/45054 https://www.exploit-db.com/exploits/6432 http://www.securityfocus.com/archive/1/496234/100/0/threaded http://www.securityfocus.com/bid/31127