VULNERABILITY INTELLIGENCE

CVE-2008-4798

CVSS score9.3 NONE
EPSS probability4.04%
CISA KEVNot currently listed
Published2008-10-30
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

The loadModule function in lib/WebGUI/Asset.pm in WebGUI before 7.5.30 (stable) allows remote attackers to execute arbitrary code by uploading a Perl module and accessing it via a crafted URL.

Weakness classification

  • nvd@nist.gov: CWE-94

Primary references