VULNERABILITY INTELLIGENCE

CVE-2008-5663

CVSS score9 HIGH
EPSS probability6.27%
CISA KEVNot currently listed
Published2008-12-19
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:C/I:C/A:C

Description

Multiple unrestricted file upload vulnerabilities in Kusaba 1.0.4 and earlier allow remote authenticated users to execute arbitrary code by uploading a file with an executable extension using (1) load_receiver.php or (2) a shipainter action to paint_save.php, then accessing the uploaded file via a direct request to this file in their user directory.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references