Unscored severity · published Jul 30, 2008
CVE-2008-3362
Unrestricted file upload vulnerability in upload.php in the Giulio Ganci Wp Downloads Manager module 0.2 for WordPress allows remote attackers to execute arbitrary code by…
–
CVSS
16.8%
EPSS
No
On KEV
Description
Unrestricted file upload vulnerability in upload.php in the Giulio Ganci Wp Downloads Manager module 0.2 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension via the upfile parameter, then accessing it via a direct request to the file in wp-content/plugins/downloads-manager/upload/.
Exploitation
Is it being used?
Exploit prediction (EPSS)16.8% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WD
WP Downloads Manager · Giulio Ganci
0.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-3362
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-3362
securityreason.com
http://securityreason.com/securityalert/4060
Exploit
http://www.securityfocus.com/bid/30365
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/43987
www.exploit-db.com
https://www.exploit-db.com/exploits/6127