Fullrevolution » Aspwebalbum : Security Vulnerabilities, CVEs, (Code Execution)
Unrestricted file upload vulnerability in Full Revolution aspWebAlbum 3.2 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in pics/, related to the uploadmedia action in album.asp.
Max CVSS
6.8
EPSS Score
5.13%
Published
2009-08-19
Updated
2017-09-29
1 vulnerabilities found