← Database

CVE-2008-4798

CRITICAL CVSS: 9.3 Published: 2008-10-30 Modified: 2026-06-16

Description

The loadModule function in lib/WebGUI/Asset.pm in WebGUI before 7.5.30 (stable) allows remote attackers to execute arbitrary code by uploading a Perl module and accessing it via a crafted URL.

Affected Platforms

Webgui Webgui

Weakness Type

CWE-94

References