CVE-2009-4793

MEDIO 6.0CVE-2009-4793 · Published 22/04/2010 · updated 16/06/2026

En resumen

CVE-2009-4793 es una vulnerabilidad MEDIO (CVSS 6.0) que afecta a bandsite cms (karl core).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.5%, mayor que el 75.1% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
bandsite cms karl_core	`= 1.1.4`	No fix yet

Description

Unrestricted file upload vulnerability in adminpanel/scripts/addphotos.php in BandSite CMS 1.1.4 allows remote authenticated administrators to execute arbitrary PHP code by uploading a file with an executable extension via an addphotos action to adminpanel/index.php, and then accessing the file via a direct request with an images/gallery/ directory name. NOTE: some of these details are obtained from third party information.

References

secunia.com/advisories/21992 · Vendor Advisory
exploit-db.com/exploits/8309

Más vulnerabilidades de bandsite cms

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free