cpe:/a:kafooeyblog:kafooeyblog:1.55b CVE-2008-5732 2008-12-26T12:30:00.733-05:00 2017-09-28T21:32:46.073-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2008-12-29T14:23:00.000-05:00 ALLOWS_OTHER_ACCESS BID 32953 SECUNIA 33223 SREASON 4812 OSVDB 50876 EXPLOIT-DB 7537 XF kafooeyblog-imageupload-file-upload(47535) Unrestricted file upload vulnerability in lib/image_upload.php in KafooeyBlog 1.55b allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file.