CVE-2008-7215
Last modified
CVE-2008-7215 is a vulnerability of currently unknown severity. The Image Manager in MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to rename arbitrary files and cause a denial of service via modified file[NewFile][name], file[NewFile][tmp_name], and file[NewFile][size] parameters in a FileUpload command, which are used to modify equivalent variables in $_FILES that are accessed when the is_uploaded_file check fails.. EPSS estimates a 1.81% chance of exploitation in the next 30 days.
Description
The Image Manager in MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to rename arbitrary files and cause a denial of service via modified file[NewFile][name], file[NewFile][tmp_name], and file[NewFile][size] parameters in a FileUpload command, which are used to modify equivalent variables in $_FILES that are accessed when the is_uploaded_file check fails.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Mambo-Foundation | Mambo | <= 4.6.3 |
| Mambo-Foundation | Mambo | 4.6.2 |
| Brilaps | Mostlyce | <= 2.0 |
References
- http://osvdb.org/42532Exploit
- http://secunia.com/advisories/28670Vendor Advisory
- http://www.vupen.com/english/advisories/2008/0325Vendor Advisory
- http://osvdb.org/42532Exploit
- http://secunia.com/advisories/28670Vendor Advisory
- http://www.vupen.com/english/advisories/2008/0325Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2008-7215?
How severe is CVE-2008-7215?
How do I fix CVE-2008-7215?
Are you affected by CVE-2008-7215?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST