vendor:
FlashBlog
by:
ilker kandemir a.k.a MEFISTO
9.3
CVSS
HIGH
Remote File Upload
N/A
CWE
Product Name: FlashBlog
Affected Version From: FlashBlog beta0.31
Affected Version To: FlashBlog beta0.31
Patch Exists: YES
Related CWE: N/A
CPE: a:flashblog:flashblog
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008
FlashBlog beta0.31 Remote File Upload Vulnerability
FlashBlog beta0.31 is vulnerable to a remote file upload vulnerability. An attacker can upload a malicious file to the server, which can be used to execute arbitrary code on the server.
Mitigation:
Upgrade to the latest version of FlashBlog.
