cve/2008/CVE-2008-7005.md

18 lines
761 B
Markdown
Raw Normal View History

2024-05-26 14:27:05 +02:00
### [CVE-2008-7005](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-7005)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
### Description
include/modules/top/1-random_quote.php in Minb Is Not a Blog (minb) 0.1.0 allows remote attackers to execute arbitrary PHP code via the quotes_to_edit parameter. NOTE: this issue has been reported as an unrestricted file upload by some sources, but that is a potential consequence of code execution.
### POC
#### Reference
- https://www.exploit-db.com/exploits/6432
#### Github
No PoCs found on GitHub currently.