← Database

CVE-2008-2574

HIGH CVSS: 7.5 Published: 2008-06-06 Modified: 2026-06-16

Description

Unrestricted file upload vulnerability in admin/Editor/imgupload.php in FlashBlog 0.31 beta allows remote attackers to execute arbitrary code by uploading a .php file, then accessing it via a direct request to the file in tus_imagenes/.

Affected Platforms

Flashblog Flashblog

Weakness Type

CWE-20

References