VYPR

Mini File Host

by Galaxyscripts

CVEs (2)

  • CVE-2008-6785May 1, 2009
    risk 0.04cvss epss 0.08

    Unrestricted file upload vulnerability in Mini File Host 1.5 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory, as demonstrated by creating a name.php file.

  • CVE-2008-0357Jan 18, 2008
    risk 0.03cvss epss 0.06

    Directory traversal vulnerability in pages/upload.php in Galaxyscripts Mini File Host 1.2.1 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the language parameter.