{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-04T18:48:21.051","vulnerabilities":[{"cve":{"id":"CVE-2008-7026","sourceIdentifier":"cve@mitre.org","published":"2009-08-21T14:30:00.610","lastModified":"2026-06-16T23:03:27.010","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in filesystem3.class.php in eFront 3.5.1 build 2710 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension as an avatar, then accessing it via a direct request to the file in (1) student/avatars/ or (2) professor/avatars/."},{"lang":"es","value":"Vulnerabilidad de carga de archivos sin restricciones en filesystem3.class.php en eFront 3.5.1 build 2710 y versiones anteriores permite a atacantes remotos ejecutar código de su elección subiendo un fichero con una extensión ejecutable como un fichero de avatar y a continuación solicitando el fichero mediante una petición directa en (1) student/avatars/ or (2) professor/avatars/."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:efrontlearning:efront:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5.1","matchCriteriaId":"A0AD6773-F9FC-47D2-A8FD-2A711A8651A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:efrontlearning:efront:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"DC4945EB-C2DC-41FB-8B49-8F27D1EBF19E"},{"vulnerable":true,"criteria":"cpe:2.3:a:efrontlearning:efront:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9648CD63-D34E-4298-8D54-2FF72C257477"},{"vulnerable":true,"criteria":"cpe:2.3:a:efrontlearning:efront:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E993440A-7730-4540-B6BC-5CFC1636FE0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:efrontlearning:efront:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"B9A7A13D-A022-49A0-BED7-701D333724B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:efrontlearning:efront:3.5.0:*:*:*:*:*:*:*","matchCriteriaId":"8802C5D3-64CD-4199-ABBC-F5AEE5AFDE46"},{"vulnerable":true,"criteria":"cpe:2.3:a:efrontlearning:efront:3.5.0:beta1:*:*:*:*:*:*","matchCriteriaId":"BD62DC8C-619B-4B61-AFAC-B7F6AFCBEB79"},{"vulnerable":true,"criteria":"cpe:2.3:a:efrontlearning:efront:3.5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"A230995D-9925-4774-9CFC-4329F756EE36"},{"vulnerable":true,"criteria":"cpe:2.3:a:efrontlearning:efront:3.5.0:beta3:*:*:*:*:*:*","matchCriteriaId":"395AFAEC-9811-4CB8-A105-AB9B9C85DA68"},{"vulnerable":true,"criteria":"cpe:2.3:a:efrontlearning:efront:3.5.0:beta4:*:*:*:*:*:*","matchCriteriaId":"E7699ABE-E6AB-490F-9D1E-34F1EE2467B6"}]}]}],"references":[{"url":"http://forum.efrontlearning.net/viewtopic.php?f=1&t=271","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/54294","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/496851/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31491","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45574","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6633","source":"cve@mitre.org"},{"url":"http://forum.efrontlearning.net/viewtopic.php?f=1&t=271","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/54294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/496851/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31491","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45574","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6633","source":"af854a3a-2127-422b-91ae-364da2661108"}]}}]}