← Database

CVE-2008-6943

MEDIUM CVSS: 6.5 Published: 2009-08-12 Modified: 2026-06-16

Description

Unrestricted file upload vulnerability in ScriptsFeed Recipes Listing Portal allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a recipe photo, then accessing it via a direct request to the file in pictures/.

Affected Platforms

Scriptsfeed Recipes Listing Portal

Weakness Type

CWE-20

References