// For flags

CVE-2008-6617

SiteXS CMS 0.1.1 - 'upload.php' Arbitrary File Upload

Severity Score

6.8
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

3
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Unrestricted file upload vulnerability in adm/visual/upload.php in SiteXS CMS 0.1.1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in images/.

Vulnerabilidad de actualización de archivo en adm/visual/upload.php en SiteXS CMS v0.1.1 permite a atacantes remotos ejecutar código de su elección mediante la subida de un fichero con una extensión ejecutable, entonces accede a él a través de una petición directa al fichero en images/.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2008-05-03 First Exploit
  • 2009-04-06 CVE Reserved
  • 2009-04-06 CVE Published
  • 2024-08-07 CVE Updated
  • 2024-10-15 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
  • CWE-264: Permissions, Privileges, and Access Controls
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Sitexs Cms
Search vendor "Sitexs Cms"
 Sitexs Cms
Search vendor "Sitexs Cms" for product "Sitexs Cms"
 0.1.1
Search vendor "Sitexs Cms" for product "Sitexs Cms" and version "0.1.1"
-
Affected