CVE-2008-6619

Unrestricted file upload vulnerability in class/ApplyDB.php in ClassSystem 2.3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in class/UploadHomepage/.

Link	Resource
http://www.chroot.org/exploits/chroot_uu_005	Exploit
http://www.securityfocus.com/bid/29372	Exploit
http://secunia.com/advisories/30365	Vendor Advisory
http://www.vupen.com/english/advisories/2008/1664	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/42651
http://www.securityfocus.com/archive/1/492583/100/0/threaded

Configuration 1

cpe:2.3:a:netlab:classsystem:2.3:*:*:*:*:*:*:*

---

Published : 2009-04-06 06:30

Updated : 2018-10-11 08:57

---

NVD link : CVE-2008-6619

Mitre link : CVE-2008-6619

Classsystem

Netlab

CWE-264