CVE-2008-7215: Input Validation
The Image Manager in MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to rename arbitrary files and cause a denial of service via modified file[NewFile][name], file[NewFile][tmpname], and file[NewFile][size] parameters in a FileUpload command, which are used to modify equivalent variables in $FILES that are accessed when the isuploadedfile check fails.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-7215?
CVE-2008-7215 is considered a critical vulnerability due to its ability to allow remote attackers to rename arbitrary files and potentially cause a denial of service.
How do I fix CVE-2008-7215?
To fix CVE-2008-7215, upgrade to a version of Mambo higher than 4.6.3 or update to MOStlyCE version 2.4 or later.
What software is affected by CVE-2008-7215?
CVE-2008-7215 affects Mambo versions up to 4.6.3 and MOStlyCE versions up to 2.0.
Can CVE-2008-7215 be exploited remotely?
Yes, CVE-2008-7215 can be exploited remotely by attackers to manipulate file uploads.
What are the potential impacts of CVE-2008-7215?
The potential impacts of CVE-2008-7215 include unauthorized file manipulation and denial of service attacks.