{"api_version":"1","generated_at":"2026-07-23T08:44:42+00:00","cve":"CVE-2008-5677","urls":{"html":"https://cve.report/CVE-2008-5677","api":"https://cve.report/api/cve/CVE-2008-5677.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2008-5677","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2008-5677"},"summary":{"title":"CVE-2008-5677","description":"Unrestricted file upload vulnerability in Kwalbum 2.0.4, 2.0.2, and earlier, when PICS_PATH is located in the web root, allows remote authenticated users with upload capability to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file under items/, related to the ReplaceBadFilenameChars function in include/ItemAdder.php.  NOTE: some of these details are obtained from third party information.","state":"PUBLISHED","assigner":"mitre","published_at":"2008-12-19 01:52:58","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-20","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.1","severity":"","vector":"AV:N/AC:H/Au:S/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:N/AC:H/Au:S/C:C/I:C/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://secunia.com/advisories/32145","name":"http://secunia.com/advisories/32145","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Security Advisory SA32145 - Kwalbum &quot;UploaditemsPage.php&quot; File Upload Vulnerability - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/31568","name":"http://www.securityfocus.com/bid/31568","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Kwalbum 'UploadItems' Parameter Arbitrary File Upload Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://securityreason.com/securityalert/4789","name":"http://securityreason.com/securityalert/4789","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Kwalbum <= 2.0.2 Arbitary File Upload Vulnerability - CXSecurity.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.exploit-db.com/exploits/6664","name":"https://www.exploit-db.com/exploits/6664","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Kwalbum <= 2.0.2 Arbitary File Upload Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45655","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45655","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-5677","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-5677","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2008","cve_id":"5677","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"kwalbum","cpe5":"kwalbum","cpe6":"0.5.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"5677","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"kwalbum","cpe5":"kwalbum","cpe6":"0.5.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"5677","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"kwalbum","cpe5":"kwalbum","cpe6":"0.5.11","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"5677","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"kwalbum","cpe5":"kwalbum","cpe6":"0.5.12","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"5677","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"kwalbum","cpe5":"kwalbum","cpe6":"0.5.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"5677","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"kwalbum","cpe5":"kwalbum","cpe6":"0.5.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"5677","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"kwalbum","cpe5":"kwalbum","cpe6":"0.5.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"5677","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"kwalbum","cpe5":"kwalbum","cpe6":"0.5.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"5677","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"kwalbum","cpe5":"kwalbum","cpe6":"0.5.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"5677","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"kwalbum","cpe5":"kwalbum","cpe6":"0.5.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"5677","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"kwalbum","cpe5":"kwalbum","cpe6":"0.5.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"5677","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"kwalbum","cpe5":"kwalbum","cpe6":"0.6.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"5677","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"kwalbum","cpe5":"kwalbum","cpe6":"0.6.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"5677","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"kwalbum","cpe5":"kwalbum","cpe6":"0.6.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"5677","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"kwalbum","cpe5":"kwalbum","cpe6":"0.6.11","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"5677","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"kwalbum","cpe5":"kwalbum","cpe6":"0.6.12","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"5677","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"kwalbum","cpe5":"kwalbum","cpe6":"0.6.13","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"5677","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"kwalbum","cpe5":"kwalbum","cpe6":"0.6.14","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"5677","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"kwalbum","cpe5":"kwalbum","cpe6":"0.6.15","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"5677","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"kwalbum","cpe5":"kwalbum","cpe6":"0.6.16","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"5677","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"kwalbum","cpe5":"kwalbum","cpe6":"0.6.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"5677","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"kwalbum","cpe5":"kwalbum","cpe6":"0.6.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"5677","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"kwalbum","cpe5":"kwalbum","cpe6":"0.6.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"5677","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"kwalbum","cpe5":"kwalbum","cpe6":"0.6.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"5677","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"kwalbum","cpe5":"kwalbum","cpe6":"0.6.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"5677","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"kwalbum","cpe5":"kwalbum","cpe6":"0.6.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"5677","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"kwalbum","cpe5":"kwalbum","cpe6":"0.7.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"5677","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"kwalbum","cpe5":"kwalbum","cpe6":"0.7.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"5677","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"kwalbum","cpe5":"kwalbum","cpe6":"0.8.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"5677","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"kwalbum","cpe5":"kwalbum","cpe6":"0.9.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"5677","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"kwalbum","cpe5":"kwalbum","cpe6":"0.9.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"5677","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"kwalbum","cpe5":"kwalbum","cpe6":"0.9.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"5677","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"kwalbum","cpe5":"kwalbum","cpe6":"0.9.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"5677","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"kwalbum","cpe5":"kwalbum","cpe6":"0.9.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"5677","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"kwalbum","cpe5":"kwalbum","cpe6":"1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"5677","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"kwalbum","cpe5":"kwalbum","cpe6":"2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"5677","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"kwalbum","cpe5":"kwalbum","cpe6":"2.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"5677","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"kwalbum","cpe5":"kwalbum","cpe6":"2.0.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"5677","vulnerable":"1","versionEndIncluding":"2.0.2","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"kwalbum","cpe5":"kwalbum","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T11:04:44.353Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"4789","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"],"url":"http://securityreason.com/securityalert/4789"},{"name":"31568","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/31568"},{"name":"32145","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/32145"},{"name":"6664","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"https://www.exploit-db.com/exploits/6664"},{"name":"kwalbum-file-upload(45655)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45655"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2008-10-03T00:00:00.000Z","descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in Kwalbum 2.0.4, 2.0.2, and earlier, when PICS_PATH is located in the web root, allows remote authenticated users with upload capability to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file under items/, related to the ReplaceBadFilenameChars function in include/ItemAdder.php.  NOTE: some of these details are obtained from third party information."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-09-28T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"4789","tags":["third-party-advisory","x_refsource_SREASON"],"url":"http://securityreason.com/securityalert/4789"},{"name":"31568","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/31568"},{"name":"32145","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/32145"},{"name":"6664","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"https://www.exploit-db.com/exploits/6664"},{"name":"kwalbum-file-upload(45655)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45655"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2008-5677","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Unrestricted file upload vulnerability in Kwalbum 2.0.4, 2.0.2, and earlier, when PICS_PATH is located in the web root, allows remote authenticated users with upload capability to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file under items/, related to the ReplaceBadFilenameChars function in include/ItemAdder.php.  NOTE: some of these details are obtained from third party information."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"4789","refsource":"SREASON","url":"http://securityreason.com/securityalert/4789"},{"name":"31568","refsource":"BID","url":"http://www.securityfocus.com/bid/31568"},{"name":"32145","refsource":"SECUNIA","url":"http://secunia.com/advisories/32145"},{"name":"6664","refsource":"EXPLOIT-DB","url":"https://www.exploit-db.com/exploits/6664"},{"name":"kwalbum-file-upload(45655)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45655"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2008-5677","datePublished":"2008-12-18T22:00:00.000Z","dateReserved":"2008-12-18T00:00:00.000Z","dateUpdated":"2024-08-07T11:04:44.353Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2008-12-19 01:52:58","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-20","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:S/C:C/I:C/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.2","matchCriteriaId":"E0E0029E-1244-4E27-836D-BCBCA768DAA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"6A628EE1-AAA1-4EFF-A5CA-0F2E81DC2082"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"073E7663-63C2-4007-9CA3-B92265FB1378"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"CD12A1D9-BE75-4210-A6A8-68A3086823CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.5.4:*:*:*:*:*:*:*","matchCriteriaId":"30A9933C-B569-4E0D-B3C8-47DDA0E22182"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.5.6:*:*:*:*:*:*:*","matchCriteriaId":"4EF6BC38-51AD-46AF-8DFD-C8117BA19C6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.5.7:*:*:*:*:*:*:*","matchCriteriaId":"4CCC1058-CA0E-4AE5-A408-6AE34E81AC01"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.5.8:*:*:*:*:*:*:*","matchCriteriaId":"7A0E6708-38A4-4DAE-810E-4C943BD822D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.5.9:*:*:*:*:*:*:*","matchCriteriaId":"D7362D30-E1F5-4470-B02B-5DFC6ACA6ECF"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.5.10:*:*:*:*:*:*:*","matchCriteriaId":"6830C8C8-65C7-4888-8C8A-E58D625F418E"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.5.11:*:*:*:*:*:*:*","matchCriteriaId":"174BFF63-F9C6-4FEC-948E-B05CAAD8904E"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.5.12:*:*:*:*:*:*:*","matchCriteriaId":"1B90ED9D-1EFD-40DC-A583-FF624792B125"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"D4F54D5D-6680-4CCC-B33B-039C98BC36B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"48AA41B6-DA32-40E1-B1F3-99699153270B"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.6.4:*:*:*:*:*:*:*","matchCriteriaId":"841FE026-D523-4679-A6FC-F9D13FC76DD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.6.5:*:*:*:*:*:*:*","matchCriteriaId":"E21537AA-D4AA-472C-96B5-76A16B6777BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.6.6:*:*:*:*:*:*:*","matchCriteriaId":"DFDF0EE8-AB3A-4BA3-87AC-7CFBAC15B234"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.6.7:*:*:*:*:*:*:*","matchCriteriaId":"285FE067-C167-429A-B740-50BAF88B6B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.6.8:*:*:*:*:*:*:*","matchCriteriaId":"2663EBA5-C63B-4430-8ADC-641A3BAF97AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.6.9:*:*:*:*:*:*:*","matchCriteriaId":"5CAEFE8B-4BA9-4934-8063-A4CDF1DCB180"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.6.10:*:*:*:*:*:*:*","matchCriteriaId":"4C061092-8B15-40EA-A2F5-0BEDCE88DCC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.6.11:*:*:*:*:*:*:*","matchCriteriaId":"07113ADE-C57F-4CD3-A903-53D17457277B"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.6.12:*:*:*:*:*:*:*","matchCriteriaId":"EECF6339-2DB1-410C-ACCA-CEDD4574FAD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.6.13:*:*:*:*:*:*:*","matchCriteriaId":"CC7CCE33-F7FE-4EA7-903F-29D3CC86FA23"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.6.14:*:*:*:*:*:*:*","matchCriteriaId":"64817FF9-8C02-4273-B78E-9A119A3EE3FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.6.15:*:*:*:*:*:*:*","matchCriteriaId":"6C57F9F8-A12B-4354-AFDF-8A2B3CCC0567"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.6.16:*:*:*:*:*:*:*","matchCriteriaId":"ACDBEF2D-EBCB-411B-9592-28542ACD3D22"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"676C76F3-F31B-4E44-AB4D-BD24039B9111"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"395A69AC-C27C-45D9-B783-C9FF536640E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"E20C19E4-B9F9-4E69-A166-670389CDA2E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"E4E402E9-9E46-459A-8941-B699E2F0E789"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"069380E9-147A-44CB-AD96-C8E842CCA2B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"90752D3F-37FA-43A5-B126-61BE98C661C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"0178BB51-DF79-49D3-8CE3-B79035C5C062"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"F287A989-BDE9-41DB-9593-98F024296500"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F38A2B47-5301-44AD-954C-DC7EA02C0CA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:2.0:*:*:*:*:*:*:*","matchCriteriaId":"770A30DB-C653-4998-9B77-2D7B04B78D5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D0CD5333-882B-4B9C-AB3B-F9EE06CC5D55"},{"vulnerable":true,"criteria":"cpe:2.3:a:kwalbum:kwalbum:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"8E8A3F7D-E2A4-4542-AA9E-09495A91FFA3"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2008","CveId":"5677","Ordinal":"1","Title":"CVE-2008-5677","CVE":"CVE-2008-5677","Year":"2008"},"notes":[{"CveYear":"2008","CveId":"5677","Ordinal":"1","NoteData":"Unrestricted file upload vulnerability in Kwalbum 2.0.4, 2.0.2, and earlier, when PICS_PATH is located in the web root, allows remote authenticated users with upload capability to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file under items/, related to the ReplaceBadFilenameChars function in include/ItemAdder.php.  NOTE: some of these details are obtained from third party information.","Type":"Description","Title":"CVE-2008-5677"},{"CveYear":"2008","CveId":"5677","Ordinal":"2","NoteData":"2008-12-18","Type":"Other","Title":"Published"},{"CveYear":"2008","CveId":"5677","Ordinal":"3","NoteData":"2017-09-28","Type":"Other","Title":"Modified"}]}}}