CVE-2008-6684
Unrestricted file upload vulnerability in editimage.php in Apartment Search Script allows remote...
CVE-2008-6684 is a medium vulnerability (CVSS 6.8) in Yourfreeworld Apartment Search Script, published April 10, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.63%, the 85th percentile. No source names a fixed version.
Unrestricted file upload vulnerability in editimage.php in Apartment Search Script allows remote attackers to execute arbitrary code by uploading a file with an executable extension and a GIF header, then accessing this file via a direct request to a renamed file in Member_Admin/logo/.
Exploit likelihood
What each source reports
NVD Score used
Unrestricted file upload vulnerability in editimage.php in Apartment Search Script allows remote attackers to execute arbitrary code by uploading a file with an executable extension and a GIF header, then accessing this file via a direct request to a renamed file in Member_Admin/logo/.
- Record
CVE-2008-6684- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
Unrestricted file upload vulnerability in editimage.php in Apartment Search Script allows remote attackers to execute arbitrary code by uploading a file with an executable extension and a GIF header, then accessing this file via a direct request to a renamed file in Member_Admin/logo/.
- Record
CVE-2008-6684- Updated
- 2026-11-02
EUVDEUVD-2008-6644 No score
Unrestricted file upload vulnerability in editimage.php in Apartment Search Script allows remote attackers to execute arbitrary code by uploading a file with an executable extension and a GIF header, then accessing this file via a direct request to a renamed file in Member_Admin/logo/.
- Record
EUVD-2008-6644- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5rx6-m8fr-g79v No score
Unrestricted file upload vulnerability in editimage.php in Apartment Search Script allows remote...
Unrestricted file upload vulnerability in editimage.php in Apartment Search Script allows remote attackers to execute arbitrary code by uploading a file with an executable extension and a GIF header, then accessing this file via a direct request to a renamed file in Member_Admin/logo/.
- Record
GHSA-5rx6-m8fr-g79v- Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |