VULNERABILITY INTELLIGENCE
CVE-2008-6814
CVSS score6.8 MEDIUM
EPSS probability3.33%
CISA KEVNot currently listed
Published2009-05-28
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P
Description
Unrestricted file upload vulnerability in image_upload.php in the SimpleBoard (com_simpleboard) component 1.0.1 and earlier for Mambo allows remote attackers to execute arbitrary code by uploading a file with an executable extension and an image/jpeg content type, then accessing this file via a direct request to the file in components/com_simpleboard/, a different vulnerability than CVE-2006-3528.
Weakness classification
- CWE-20: Improper Input Validation