Unrated severityNVD Advisory· Published Sep 11, 2009· Updated Jun 16, 2026
CVE-2008-7209
CVE-2008-7209
Description
Unrestricted file upload vulnerability in the add2 action in a_upload.php in OneCMS 2.4, and possibly earlier, allows remote attackers to execute arbitrary code by uploading a file with an executable extension and using a safe content type such as image/gif, then accessing it via a direct request to the file in an unspecified directory.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
9- www.bugreport.ir/index_26.htmnvdExploit
- www.securityfocus.com/bid/27158nvdExploit
- www.vupen.com/english/advisories/2008/0081nvdVendor Advisory
- osvdb.org/51117nvd
- sourceforge.net/forum/forum.phpnvd
- www.securityfocus.com/archive/1/485837/100/200/threadednvd
- www.securityfocus.com/archive/1/487136/100/200/threadednvd
- exchange.xforce.ibmcloud.com/vulnerabilities/39485nvd
- www.exploit-db.com/exploits/4857nvd
News mentions
0No linked articles in our index yet.