CVE-2008-7088

MEDIUM

6.5

CVSS Severity Score

EPSS Score0.1590%

EPSS Percentile39.82th

PublishedAug 26, 2009

Last ModifiedApr 23, 2026

Vulnerability Description

Unrestricted file upload vulnerability in upload.php in PhotoPost vBGallery 2.4.2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension followed by a safe extension, then accessing it via a direct request to the file in a certain path. NOTE: this may be the same vulnerability as CVE-2008-0251, but this is not clear due to lack of details from the vendor.

Affected Platforms (CPE)

📦

Photopost

Photopost Vbgallery

= 2.4.2

References & Advisories

🔗 http://www.securityfocus.com/bid/30249

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/43845

🔗 https://www.exploit-db.com/exploits/6082