CVE-2008-6638

HIGH 8.8CVE-2008-6638 · Published 07/04/2009 · updated 16/06/2026

In short

CVE-2008-6638 is a HIGH (CVSS 8.8) vulnerability affecting http file upload activex control (versalsoft).
Chance of exploitation in the next 30 days (EPSS): 1.7%, higher than 77.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
http file upload activex control versalsoft	`= 6.0.0.35`	No fix yet

Description

Insecure method vulnerability in the Versalsoft HTTP Image Uploader ActiveX control (UUploaderSvrD.dll 6.0.0.35) allows remote attackers to delete arbitrary files via the RemoveFileOrDir method.

References

securityfocus.com/bid/28301 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/41258
exploit-db.com/exploits/5272
exploit-db.com/exploits/5569

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free