CVE-2008-2574

N/A Unknown

Published: June 06, 2008 Modified: April 23, 2026

Description

Unrestricted file upload vulnerability in admin/Editor/imgupload.php in FlashBlog 0.31 beta allows remote attackers to execute arbitrary code by uploading a .php file, then accessing it via a direct request to the file in tus_imagenes/.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://securityreason.com/securityalert/3928

Source: cve@mitre.org

http://www.dumenci.net/web-action/flashblog-beta0.31-remote-file-upload-vulnerability.html

Source: cve@mitre.org

Exploit

http://www.flashblog.org

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/492738/100/0/threaded

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/42820

Source: cve@mitre.org

https://www.exploit-db.com/exploits/5728

Source: cve@mitre.org

http://securityreason.com/securityalert/3928