CVE-2008-0373: Unrestricted file upload vulnerability in PHP F1 Max's File Uploader allows remote attackers to upload and execute arbitrary PHP files

Unscored severity · published Jan 22, 2008

CVE-2008-0373

Unrestricted file upload vulnerability in PHP F1 Max's File Uploader allows remote attackers to upload and execute arbitrary PHP files

–

CVSS

2.2%

EPSS

On KEV

Description

Unrestricted file upload vulnerability in PHP F1 Max's File Uploader allows remote attackers to upload and execute arbitrary PHP files.

Exploitation

Is it being used?

Exploit prediction (EPSS)2.2% · higher than 82% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

All versions, or not specified · source: NVD

Affected product

F1 Maxs File Uploader

Php

References