CVE-2008-6445 File upload in n/a

High 7.5 Published 9 Mar 2009 Updated 7 Aug 2024

Attackers can upload arbitrary PHP code to YourPlace, potentially leading to remote code execution.

Exploited in the wild: Not known
Login needed: Not stated
Attackable: Over the internet
Victim action needed: Not stated
Fix: None listed

What is CVE-2008-6445?

CVE-2008-6445 is a high-severity vulnerability in n/a, published on 9 Mar 2009. It can be exploited over the network.

Official description

Unspecified vulnerability in YourPlace before 1.0.1 has unknown impact and attack vectors, possibly related to improper authentication and the ability to upload arbitrary PHP code. NOTE: some of these details are obtained from third party information.

Weakness: CWE-287

Which versions are affected by CVE-2008-6445?

It affects 1 product.

Products include Yourplace Yourplace.

How do I fix CVE-2008-6445?

No fix has been published for CVE-2008-6445 yet. Limit exposure of the affected software until one is available.

Is CVE-2008-6445 being exploited?

There is no known exploitation of CVE-2008-6445 in the wild and no public exploit code.

Sources

Also known as GHSA-6hqp-9qp3-hx5w.