CVE-2008-3239

CRITICAL 9.3CVE-2008-3239 · Published 21/07/2008 · updated 16/06/2026

In short

CVE-2008-3239 is a CRITICAL (CVSS 9.3) vulnerability affecting phpizabi (phpizabi).
Chance of exploitation in the next 30 days (EPSS): 5.2%, higher than 92.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
phpizabi phpizabi	`= 0.848b`	No fix yet

Description

Unrestricted file upload vulnerability in the writeLogEntry function in system/v_cron_proc.php in PHPizabi 0.848b C1 HFP1, when register_globals is enabled, allows remote attackers to upload and execute arbitrary code via a filename in the CONF[CRON_LOGFILE] parameter and file contents in the CONF[LOCALE_LONG_DATE_TIME] parameter.

References

secunia.com/advisories/31127 · Vendor Advisory
securityreason.com/securityalert/4022
securityfocus.com/bid/30257 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/43856
exploit-db.com/exploits/6085

More vulnerabilities in phpizabi

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free