CVE-2008-6478

MEDIUM 6.8CVE-2008-6478 · Published 16/03/2009 · updated 16/06/2026

In short

CVE-2008-6478 is a MEDIUM (CVSS 6.8) vulnerability affecting virtuozzo containers (parallels).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 70.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
virtuozzo containers parallels	`= 3.0.0-25.4.swsoft= 4.0.0-365.6.swsoft`	No fix yet

Description

Cross-site request forgery (CSRF) vulnerability in the file manager in the VZPP web interface for Parallels Virtuozzo 365.6.swsoft (build 4.0.0-365.6.swsoft) and 25.4.swsoft (build 3.0.0-25.4.swsoft) allows remote attackers to create and delete arbitrary files as the administrator via a link or IMG tag to (1) create-file and (2) list-control in vz/cp/vzdir/infrman/envs/files/; or modify system configuration via the path parameter to vz/cp/vzdir/infrman/envs/files/index.

References

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free