VULNERABILITY INTELLIGENCE
CVE-2008-6684
CVSS score6.8 MEDIUM
EPSS probability2.63%
CISA KEVNot currently listed
Published2009-04-10
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P
Description
Unrestricted file upload vulnerability in editimage.php in Apartment Search Script allows remote attackers to execute arbitrary code by uploading a file with an executable extension and a GIF header, then accessing this file via a direct request to a renamed file in Member_Admin/logo/.
Weakness classification
- CWE-20: Improper Input Validation