CVE-2008-1495

Unrestricted file upload vulnerability in administrer/produits.php in PEEL, possibly 3.x and earlier, allows remote authenticated administrators to upload and execute arbitrary PHP files via a modified content type in an ajout action, as demonstrated by (1) image/gif and (2) application/pdf.

🔗 References (10)

• cve@mitrehttp://realn.free.fr/releases/70207
• cve@mitrehttp://secunia.com/advisories/29466
• cve@mitrehttp://www.securityfocus.com/bid/28346
• cve@mitrehttps://exchange.xforce.ibmcloud.com/vulnerabilities/41354
• cve@mitrehttps://www.exploit-db.com/exploits/5281
• af854a3a-2127-422b-91ae-364da2661108http://realn.free.fr/releases/70207
• af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/29466
• af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/28346
• af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/41354
• af854a3a-2127-422b-91ae-364da2661108https://www.exploit-db.com/exploits/5281