Security Advisory

CVE-2008-3093

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2008-07-09 19:00:00
Last updated 2024-08-07 09:28:40
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Unrestricted file upload vulnerability in ImperialBB 2.3.5 and earlier allows remote authenticated users to upload and execute arbitrary PHP code by placing a .php filename in the Upload_Avatar parameter and sending the image/gif content type.