Vulnerability Details CVE-2008-3362
Unrestricted file upload vulnerability in upload.php in the Giulio Ganci Wp Downloads Manager module 0.2 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension via the upfile parameter, then accessing it via a direct request to the file in wp-content/plugins/downloads-manager/upload/.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.077
EPSS Ranking 91.5%
CVSS Severity
CVSS v2 Score 10.0
References
- http://securityreason.com/securityalert/4060
- http://www.securityfocus.com/bid/30365
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43987
- https://www.exploit-db.com/exploits/6127
- http://securityreason.com/securityalert/4060
- http://www.securityfocus.com/bid/30365
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43987
- https://www.exploit-db.com/exploits/6127
Products affected by CVE-2008-3362
-
cpe:2.3:a:giulio_ganci:wp_downloads_manager:0.2
-
cpe:2.3:a:wordpress:wp_downloads_manager:0.2