CVE-2008-7215
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2008-7215
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The Image Manager in MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to rename arbitrary files and cause a denial of service via modified file[NewFile][name], file[NewFile][tmp_name], and file[NewFile][size] parameters in a FileUpload command, which are used to modify equivalent variables in $_FILES that are accessed when the is_uploaded_file check fails.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Mambo MOStlyCE Module Image Manager Utility任意文件上传漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
MOStlyCE 2.4版本之前的版本的图像管理器,当在Mambo 4.6.3版本及其早期版本中运行时,远程攻击者可以借助一个FileUpload指令中的修改过的file[NewFile][name], file[NewFile][tmp_name]和file[NewFile][size]参数，且这些参数被用来在is_uploaded_file核查失败时修改$_FILES中的对等自变量，以重命名任意文件并造成拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2008-7215
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2008-7215
请登录查看更多情报信息。
- http://forum.mambo-foundation.org/showthread.php?t=10158x_refsource_CONFIRM
- http://www.bugreport.ir/index_33.htmx_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2008-7215
Same Patch Batch · n/a · 2009-09-11 · 31 CVEs total
| CVE-2009-2800 | Apple Mac OS X Alias Manager 缓冲区溢出漏洞 | |
| CVE-2008-7216 | wordpress peter%27s_math_anti-spam_for_wordpress 权限许可和访问控制漏洞 | |
| CVE-2008-7214 | Brilaps mostlyce跨站请求伪造漏洞 | |
| CVE-2008-7213 | Mambo MOStlyCE Module 'connector.php'跨站脚本攻击漏洞 | |
| CVE-2008-7212 | Brilaps mostlyce权限许可和访问控制漏洞 | |
| CVE-2008-7211 | Creative Ensoniq PCI ES1371 WDM Driver 本地特权升级漏洞 | |
| CVE-2008-7210 | ming_han ajchat SQL注入漏洞 | |
| CVE-2008-7209 | Insane_Visions OneCMS ‘a_upload.php’无限制文件上传漏洞 | |
| CVE-2008-7208 | Insane_Visions OneCMS多个SQL注入漏洞 | |
| CVE-2008-7207 | rivetcode rivettracker 加密问题漏洞 | |
| CVE-2008-7206 | ELOG 'logbook' HTML注入漏洞 | |
| CVE-2008-7205 | VirtueMart 信息泄露漏洞 | |
| CVE-2008-7204 | virtuemart 跨站请求伪造漏洞 | |
| CVE-2008-7203 | Valvesoftware Half-Life Counter-Strike Login拒绝服务漏洞 | |
| CVE-2009-3167 | anantasoft gazelle_cms 路径游历漏洞 | |
| CVE-2009-3168 | Mevin Productions Basic PHP Events Lister多个管理脚本权限认证绕过漏洞 | |
| CVE-2009-3182 | anantasoft gazelle_cms 权限许可和访问控制漏洞 | |
| CVE-2009-3181 | anantasoft gazelle_cms 路径游历漏洞 | |
| CVE-2009-3180 | anantasoft gazelle_cms renew.php'信任管理漏洞 | |
| CVE-2009-3179 | Symantec Altiris Deployment Solution 多个远程漏洞 |
Showing top 20 of 31 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2008-7215
No comments yet