Unrated severityNVD Advisory· Published Apr 6, 2009· Updated Apr 23, 2026
CVE-2008-6619
CVE-2008-6619
Description
Unrestricted file upload vulnerability in class/ApplyDB.php in ClassSystem 2.3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in class/UploadHomepage/.
Affected products
1- cpe:2.3:a:netlab:classsystem:2.3:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
6- www.chroot.org/exploits/chroot_uu_005nvdExploit
- www.securityfocus.com/bid/29372nvdExploit
- secunia.com/advisories/30365nvdVendor Advisory
- www.vupen.com/english/advisories/2008/1664nvdVendor Advisory
- www.securityfocus.com/archive/1/492583/100/0/threadednvd
- exchange.xforce.ibmcloud.com/vulnerabilities/42651nvd
News mentions
0No linked articles in our index yet.