CVE-2008-6814: Input Validation
Unrestricted file upload vulnerability in imageupload.php in the SimpleBoard (comsimpleboard) component 1.0.1 and earlier for Mambo allows remote attackers to execute arbitrary code by uploading a file with an executable extension and an image/jpeg content type, then accessing this file via a direct request to the file in components/comsimpleboard/, a different vulnerability than CVE-2006-3528.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-6814?
CVE-2008-6814 is considered a critical vulnerability due to its ability to allow remote code execution through unrestricted file uploads.
How do I fix CVE-2008-6814?
To fix CVE-2008-6814, upgrade to SimpleBoard versions later than 1.0.1 that appropriately restrict file uploads.
What software is affected by CVE-2008-6814?
CVE-2008-6814 affects the SimpleBoard component versions 1.0.1 and earlier, including variants 0.9, 0.9.1, and 0.9.2.
Can attackers exploit CVE-2008-6814 easily?
Yes, attackers can easily exploit CVE-2008-6814 by uploading malicious files disguised as image files.
What are the consequences of CVE-2008-6814 exploitation?
Exploitation of CVE-2008-6814 can lead to arbitrary code execution on the server hosting the vulnerable application.